last executing test programs: 7m19.372004814s ago: executing program 3 (id=4): socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9282, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='block_bio_complete\x00', r2, 0x0, 0x1}, 0x18) write$cgroup_int(r1, &(0x7f0000000040)=0x1c9, 0x12) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r4 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=b', @ANYRESOCT]) lseek(r0, 0xd0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x5, 0xa, &(0x7f00000002c0)=""/10, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x20000005}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0xf, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r1, r1, r1, r1, r1, r1, r1, r1, r6, r6, 0xffffffffffffffff], &(0x7f0000000300), 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="000002000000001800"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="020000000100000000000000000000000100000000"], 0x48) 7m18.224616253s ago: executing program 3 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000000c0)={0x9, 0x0, '\x00', {0x0, @reserved}}) 7m17.838689028s ago: executing program 3 (id=7): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xa) (fail_nth: 3) 7m2.76850126s ago: executing program 32 (id=7): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xa) (fail_nth: 3) 4m27.858016002s ago: executing program 1 (id=612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="840000001000030500000004000000000000ffff", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000900010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r1], 0x84}}, 0x20008040) 4m27.644011596s ago: executing program 1 (id=614): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x3, 0x1) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000280)=""/66) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x5, 0x7ffc1ffe}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='f2fs_truncate_data_blocks_range\x00', 0xffffffffffffffff, 0x0, 0x200002}, 0x18) utimes(0x0, &(0x7f0000000840)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') lstat(0x0, &(0x7f0000000300)) r3 = open(&(0x7f0000000580)='./file0\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000440)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x203, 0x1, {0xffffffffffffffff, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x400000}}, {0x0, 0x13}}}, 0x35) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pipe(0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000240)=0x9, 0x4) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f00000038c0)={0x2020}, 0x2020) 4m25.288329034s ago: executing program 1 (id=621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f00000003c0)='m\xba\x9c\xb6bz#h\xc15[W\"\x00D\x91\xe0\xa9Fo\x1a\xad\xcb\x1c\xbf\xbc\x0f\xae\xda\xe0\x8e\x11\xf1\xc2;\xe9?\x98q\xf2\xcc+\xe2\x97\\\x8d<\xe3\xfbx5i\xb4=w\xa5_*\xbb//\x85\x84\x7f!\xea\x9afH\xa7?\x83r\xd9yX]\x83=\xbd\x16\x8a\x92 \xe3Z\xecb\xc4\x1a[\xdd\x899\xc0\x12\x19\x8e\xc4\xe8\x9b\xf0\xbb\xe1\xa0\xb2\tN\x1b\x06X{\x10T\xfc\\\xd7L \x18L\xda#h\x8d6Z\xda\xe3\xe9\xab\xb0B\xc1&=yi\xec\xe8\x9e\x91\x8f\xebv\x9f0:\xafh\xd3\xc9$X\x99g\xc8\x0fg\x8a\xd7\xf1\xe2\xc8|/\xf6\xdc~\xd5\xdc\x12\xc4\x13\xc7\xa0\xd76\\\xfd\xc2\xef\x05\x82\xe1\f\xd2\xfe\xa0') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setgroups(0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r4, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f0000000300)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$sock(r6, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x80) setregid(0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x80000) 4m24.239664732s ago: executing program 1 (id=624): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = socket(0x11, 0x3, 0x0) ioperm(0x9, 0x40, 0x8001) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r3 = gettid() r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x404c000) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4040000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) wait4(r1, 0x0, 0x40000000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)}, 0x20040051) 4m23.064438667s ago: executing program 1 (id=630): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) userfaultfd(0x801) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000140)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1600000000000000040000000102000000000000e9259ae28f256c48ca8de0d8df53c6c25d4442e0bb68acc895cb395c81451aafb06c709c795533044f5c90248c174e73f91f06900a45b55797c10fd7c15f2ea48aa16e03c0578b6fc7470b05d00a456d8716b6afb70f27919dfeadde00145d37362773da5a2f531749c7a231cda439eb53b0c234b67ee545ac9378b7e9adfbcb7cca16d3e8bea12120ed89b1971cdadcadf9c119b2b3387f980cae02b0d5a296b06ac13d8f51431517e9313f05d7d403c20f6774e0b4f6ddedad0b929959530e81b2d8a48e49", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0xe, 0x2100, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 4m22.821874941s ago: executing program 1 (id=632): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) recvmmsg(0xffffffffffffffff, &(0x7f0000002400)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000280)=""/86, 0x56}], 0x2, &(0x7f0000000340)=""/254, 0xfe}, 0xe}, {{&(0x7f0000000440)=@xdp, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/172, 0xac}, {&(0x7f0000000580)=""/33, 0x21}, {&(0x7f00000005c0)=""/15, 0xf}], 0x3, &(0x7f0000000640)=""/124, 0x7c}, 0xb}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f00000007c0)=""/34, 0x22}], 0x2, &(0x7f0000000840)=""/238, 0xee}, 0x7}, {{&(0x7f0000000940)=@qipcrtr, 0x80, &(0x7f0000000b80)=[{&(0x7f00000009c0)=""/226, 0xe2}, {&(0x7f0000000ac0)=""/162, 0xa2}], 0x2, &(0x7f0000000bc0)=""/88, 0x58}, 0x80000000}, {{&(0x7f0000000c40)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000cc0)=""/52, 0x34}, {&(0x7f0000000d00)=""/222, 0xde}], 0x2}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000e40)=""/153, 0x99}, {&(0x7f0000000f00)=""/16, 0x10}, {&(0x7f0000000f40)=""/4096, 0x1000}], 0x3, &(0x7f0000001f80)=""/4, 0x4}, 0x5}, {{&(0x7f0000001fc0)=@sco={0x1f, @none}, 0x80, &(0x7f0000002180)=[{&(0x7f0000002040)=""/114, 0x72}, {&(0x7f00000020c0)=""/158, 0x9e}], 0x2, &(0x7f00000021c0)=""/65, 0x41}, 0xffff}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002240)=""/193, 0xc1}, {&(0x7f0000002340)=""/85, 0x55}], 0x2}, 0xbb2a}], 0x8, 0x40000100, &(0x7f0000002600)={0x0, 0x3938700}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000010000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="03010000bcb5f11a24001280110001006272696467655f736c617665000000000c0005800500060001000000140003006272696467655f736c6176655f30000054fbf2a09d62a18ae82f60e96c4241f4d443b8481d0d6ccaace83caec45351c77df4b824a3fdfa4deb0c8f2f1f38064635bba2eb3e7d0534c108588697771508a4d8329a66b9d210ed1c3b862a15f8ffd65201f4b5c0f214"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 4m22.62751318s ago: executing program 33 (id=632): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) recvmmsg(0xffffffffffffffff, &(0x7f0000002400)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000280)=""/86, 0x56}], 0x2, &(0x7f0000000340)=""/254, 0xfe}, 0xe}, {{&(0x7f0000000440)=@xdp, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/172, 0xac}, {&(0x7f0000000580)=""/33, 0x21}, {&(0x7f00000005c0)=""/15, 0xf}], 0x3, &(0x7f0000000640)=""/124, 0x7c}, 0xb}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f00000007c0)=""/34, 0x22}], 0x2, &(0x7f0000000840)=""/238, 0xee}, 0x7}, {{&(0x7f0000000940)=@qipcrtr, 0x80, &(0x7f0000000b80)=[{&(0x7f00000009c0)=""/226, 0xe2}, {&(0x7f0000000ac0)=""/162, 0xa2}], 0x2, &(0x7f0000000bc0)=""/88, 0x58}, 0x80000000}, {{&(0x7f0000000c40)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000cc0)=""/52, 0x34}, {&(0x7f0000000d00)=""/222, 0xde}], 0x2}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000e40)=""/153, 0x99}, {&(0x7f0000000f00)=""/16, 0x10}, {&(0x7f0000000f40)=""/4096, 0x1000}], 0x3, &(0x7f0000001f80)=""/4, 0x4}, 0x5}, {{&(0x7f0000001fc0)=@sco={0x1f, @none}, 0x80, &(0x7f0000002180)=[{&(0x7f0000002040)=""/114, 0x72}, {&(0x7f00000020c0)=""/158, 0x9e}], 0x2, &(0x7f00000021c0)=""/65, 0x41}, 0xffff}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002240)=""/193, 0xc1}, {&(0x7f0000002340)=""/85, 0x55}], 0x2}, 0xbb2a}], 0x8, 0x40000100, &(0x7f0000002600)={0x0, 0x3938700}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000010000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="03010000bcb5f11a24001280110001006272696467655f736c617665000000000c0005800500060001000000140003006272696467655f736c6176655f30000054fbf2a09d62a18ae82f60e96c4241f4d443b8481d0d6ccaace83caec45351c77df4b824a3fdfa4deb0c8f2f1f38064635bba2eb3e7d0534c108588697771508a4d8329a66b9d210ed1c3b862a15f8ffd65201f4b5c0f214"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 2m35.346678576s ago: executing program 2 (id=994): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4004001) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) sendmmsg$alg(r1, &(0x7f0000000ac0)=[{0x0, 0x40000000, &(0x7f0000000540)=[{&(0x7f0000000240)="1c92", 0x2}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040811) 2m34.923840749s ago: executing program 2 (id=995): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002000)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) 2m33.919465424s ago: executing program 2 (id=997): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000000c0), 0x4c, 0x24000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0xf, &(0x7f0000000380)) syslog(0x3, &(0x7f0000000200)=""/90, 0x5a) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_pwait2(r3, &(0x7f0000000100)=[{}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) r5 = syz_open_dev$rtc(0x0, 0xe92, 0x0) ioctl$RTC_PIE_OFF(r5, 0x7006) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="ad000000", 0x4) sendmmsg$unix(r4, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0xfffffdef}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0xfdef) 2m31.86293319s ago: executing program 2 (id=1006): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002000)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) 2m30.618936475s ago: executing program 2 (id=1011): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0xb00) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) r4 = socket$inet(0xa, 0x801, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00'/20, @ANYRES32=0x0, @ANYBLOB="019800000000000010001280080001006772650004000280"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000806c0015000049e395ffffffffe2ffff7f", @ANYRES32, @ANYRES32], 0x38}, 0x1, 0x300}, 0x0) getpeername(0xffffffffffffffff, &(0x7f00000002c0)=@in={0x2, 0x0, @remote}, &(0x7f0000000180)=0x80) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4000050, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x5, 0x4002) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x4000000, 0xfffffffe, 0x3002, 0x0, 0x3, 0x9, 0x5, 0x7}}) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = msgget$private(0x0, 0x3ac) msgrcv(r7, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) socket$nl_route(0x10, 0x3, 0x0) 2m27.201893332s ago: executing program 2 (id=1016): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000002d00090027bd7000000000000400000008001a00", @ANYBLOB="8208880ed3febf23b4e183fd5675f236d6b415adefe1172be4cee879f1a3a784049d5e56df1470fac1a606f084405654d6cca258531ce15a3baf043a3e380e019f9e4eaf6134dc961d8a232620318252af2e885d1fb31da3c06dc0b0bfea1f2cef8b289ec6ebaecb6daa8c803b5b138e702745ac873cb52263df208dd6801cf0a758765e6d3c0c64976a7d58e1edcd3916e649be3bd684b29355a7c4f8fc7c875ba0f2ea4c9da0e61672c71b7707ce6ba44a400baf3852c2234d9ced60dc9f6116c64482ee4c4e331cb3682ad1de49525b0d0b62a4b5aed922c85c240c5bd863e0a2f072c6d33de8a4ac5d7084", @ANYRES64=r1], 0x1c}}, 0x84) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r2, 0x0, 0x0, 0x1001f0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2002) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0) mremap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f000000d000/0x2000)=nil) getxattr(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet(0x2b, 0x801, 0x0) listen(r5, 0x0) splice(r5, 0x0, r4, 0x0, 0x8ec0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) r6 = syz_clone(0x1000000, &(0x7f0000001200)="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", 0x1000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000240)="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") prlimit64(r6, 0xd, &(0x7f0000000140)={0x3a9, 0x5}, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mount$cgroup(0x0, &(0x7f0000001180)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000180)={[{@name={'name', 0x3d, 'm'}}, {@name={'name', 0x3d, 'blk-\xe5Mio'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x4, 0x5201, 0x0, 0x0}, {0xfffc, 0xd010, 0x0, 0x0}], 0x2}) 2m12.018342813s ago: executing program 34 (id=1016): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000002d00090027bd7000000000000400000008001a00", @ANYBLOB="8208880ed3febf23b4e183fd5675f236d6b415adefe1172be4cee879f1a3a784049d5e56df1470fac1a606f084405654d6cca258531ce15a3baf043a3e380e019f9e4eaf6134dc961d8a232620318252af2e885d1fb31da3c06dc0b0bfea1f2cef8b289ec6ebaecb6daa8c803b5b138e702745ac873cb52263df208dd6801cf0a758765e6d3c0c64976a7d58e1edcd3916e649be3bd684b29355a7c4f8fc7c875ba0f2ea4c9da0e61672c71b7707ce6ba44a400baf3852c2234d9ced60dc9f6116c64482ee4c4e331cb3682ad1de49525b0d0b62a4b5aed922c85c240c5bd863e0a2f072c6d33de8a4ac5d7084", @ANYRES64=r1], 0x1c}}, 0x84) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r2, 0x0, 0x0, 0x1001f0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2002) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0) mremap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f000000d000/0x2000)=nil) getxattr(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet(0x2b, 0x801, 0x0) listen(r5, 0x0) splice(r5, 0x0, r4, 0x0, 0x8ec0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) r6 = syz_clone(0x1000000, &(0x7f0000001200)="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", 0x1000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000240)="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") prlimit64(r6, 0xd, &(0x7f0000000140)={0x3a9, 0x5}, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mount$cgroup(0x0, &(0x7f0000001180)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000180)={[{@name={'name', 0x3d, 'm'}}, {@name={'name', 0x3d, 'blk-\xe5Mio'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x4, 0x5201, 0x0, 0x0}, {0xfffc, 0xd010, 0x0, 0x0}], 0x2}) 14.740387394s ago: executing program 5 (id=1532): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x200, 0x2000) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000240)=""/178) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup/../file0\x00', &(0x7f0000000080)='omfs\x00', 0x208c01, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r9, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c030}, 0x5010) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r6, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 13.014649235s ago: executing program 5 (id=1537): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1f}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 12.060156855s ago: executing program 5 (id=1541): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x2, 0xff, 0x2}}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000004c0)="b003846833bdd790c2", 0x9}}, 0xee) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x0, 0xff, 0x6}, 0xfd}, 0x18) sendmsg$sock(r4, &(0x7f0000000200)={&(0x7f00000005c0)=@can={0x1d, 0x0, 0x0, 0xf5}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000640)="d70843d0d3a7d851fa", 0x9}], 0x1}, 0x4000040) 10.672216348s ago: executing program 5 (id=1550): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40000, 0x0) ioctl$COMEDI_INSNLIST(r1, 0x8010640b, &(0x7f00001859c0)={0x1, &(0x7f0000185780)=[{0xc000002, 0xf00, 0x0, 0x2, 0x3}]}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000005, 0x1, 0x4}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r4, &(0x7f0000000080)=ANY=[], 0xfd85) mount$fuse(0x0, &(0x7f00000012c0)='./file0\x00', 0x0, 0x810889, 0x0) ustat(0x5, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x2c240, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x0, 0x0}) fcntl$lock(r4, 0x25, &(0x7f0000003300)={0x0, 0x2, 0x0, 0x7, r5}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/13, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x0, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) write$UHID_INPUT(r0, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006) 7.943476161s ago: executing program 5 (id=1555): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xfffffffc}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x0, 0x0, 0x4, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') process_vm_writev(0x0, &(0x7f0000001c80), 0x0, 0x0, 0x0, 0x0) pread64(r3, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000300)={0x0, @sliced={0x4, [0x0, 0x4, 0x2, 0x7, 0x0, 0x1, 0x4, 0x5, 0x8, 0x9, 0x1, 0x665, 0x4e, 0x200, 0x2f6, 0xfc01, 0x5, 0x9, 0x8, 0x643, 0x5, 0x1, 0x298b, 0x7, 0x7, 0x8010, 0x8, 0x639, 0x3, 0xfffd, 0x87b8, 0xb, 0x8, 0x2, 0xa, 0x2, 0x8001, 0x7c, 0xc, 0x4, 0x8001, 0xb, 0x1ff, 0x0, 0x7, 0x8, 0x948, 0xc], 0x8b}}) syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}}, 0x0) keyctl$read(0x20, r2, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$setperm(0x5, r5, 0x52b242d) request_key(&(0x7f00000001c0)='keyring\x00', 0x0, 0x0, r5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r6 = socket$igmp(0x2, 0x3, 0x2) fgetxattr(r6, &(0x7f0000000000)=@random={'security.', '\x00'}, &(0x7f0000000040)=""/1, 0x1) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, &(0x7f0000000100)='barrier') setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000140), 0x4) 4.960505281s ago: executing program 7 (id=1566): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="b601000000000000bd110000001300008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03bf3a48dfe3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f631cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc36b3d7c734a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9d74aa222038994dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b223ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bf050c719661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebe646302bf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc02846ac5791278f18c6759e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb5d5505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6ddeb67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff82794203da18db6fcf89715c2d338f78d8b9220171b41f528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef0000000000000000000037fcffffffffffffff8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03d0e119c963a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac038e9e17136e7c698f73faaabb3d00000000000080014573789425c4c32da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767cd755783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a47464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f916b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf07000000eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac80574fa3ea312997ab81bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d40837dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b86670000000000000000b27a2616c03cdf6c009447a652bca9b325e73c0737d5b717945e4fe7a169c5e2c54fc71a4104aa7cf0f5d30e2fcd9503650edbd8a5971a9a1fde5e5df37469ae204a6e899eacc1e63034cbabc5604739881cb82604bed3e53696a0606b26b879ef232a1a038291389593d1575cb79aa8284cf01a7e1a456acab9d8d608ad69d4c4b56492af7004e7ed9d47c5db3d76a00bea7c804f3a3638408bc1636f1009b7f185f51606918eaa0ab6bef11ae3d300"], &(0x7f0000000080)='GPL\x00', 0x9, 0x34, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 4.890301784s ago: executing program 7 (id=1567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x0) close(r0) 4.722422364s ago: executing program 7 (id=1570): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x26, 0x0}}], 0x1, 0x0) close(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'gre0\x00', r1, 0x1, 0x40, 0x5, 0x0, {{0x12, 0x4, 0x1, 0x2e, 0x48, 0x68, 0x0, 0x7, 0x29, 0x0, @multicast2, @broadcast, {[@timestamp_prespec={0x44, 0x34, 0xba, 0x3, 0x4, [{@remote, 0x1}, {@empty, 0x4}, {@private=0xa010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x1ff}, {@loopback, 0x2}, {@private=0xa010102, 0x7}]}]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="000200000000e3ffff030001800000000000"], 0x18}}, 0x4000004) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000792000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/216, 0xd8, 0x1, &(0x7f0000000200)=""/120, 0x78}, &(0x7f0000000380)=0x40) r6 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@loopback, @in6=@mcast2, 0x4e21, 0x0, 0x4e20, 0x6, 0xa, 0xa0, 0x80, 0x88, 0x0, r6}, {0x3, 0x4, 0x56f0, 0x6, 0xb3d, 0x0, 0x3, 0x5}, {0x7fff, 0x8, 0x7, 0x2}, 0x1, 0x6e6bb3, 0x1, 0x0, 0x3, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x3501, 0x4, 0x0, 0x3, 0x8000, 0x3, 0x7}}, 0xe8) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="a4db3fc1e241b915f5e28bc5edb60aec9b89a8a4a671b18548c3904c1773248e97b4635d95fbcd0083605786c21a4214349002cf566180f561654add7ea392e0caf404481b7e709656fc5008df6f771ee690a37f9d57728887de7897cd4cf5fac760dcf2192194232e909a37f521e5c21facc494ebb7f2da7132b196322f0635f68be3b409f47e2af2ce28e6578fa9c61cfc6002a313d9e31a3cfdd991bd7c27eb32d94f6ef82ecc8eeecaf073b4048f00b281695e69eb7a5eb3de41a5cb194bbb694aa4f9c63d436d4710ae5cca4c8db70b37aeeb355124d57ef67146", @ANYRESOCT=r1, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) syz_open_dev$ptys(0xc, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x86, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100)) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x7d65c000) 4.513263962s ago: executing program 0 (id=1571): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(0x0, 0x0, 0x0, 0x185099, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x1, 0x8b, 0x3a, 0x20, 0x711, 0x210, 0x7c8a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xd3, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x62, 0x1, 0x0, 0x5b, 0x37, 0xe1, 0x4}}]}}]}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000017c00000400fc80100001805fd05a607fd48040ffc30000080002"], 0x30}, 0x1, 0x0, 0x0, 0xc03f}, 0xc010) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) pipe2$watch_queue(&(0x7f0000000100), 0x80) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r7) 4.412297806s ago: executing program 7 (id=1573): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000200)="fd", 0x1}], 0x1, 0x0, 0x0, 0x8008044}, 0x881) r3 = dup(r2) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0xcc0}, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500100000000000f2ffffff00", @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b7fff0067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) fsopen(0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 2.393542485s ago: executing program 6 (id=1574): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x100001, 0x0, {0x0, 0x0, 0xfff1, r2, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x3c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x2}, @TCA_FQ_PLIMIT={0x8, 0x1, 0xd5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040040) 2.268053363s ago: executing program 6 (id=1575): r0 = socket$can_raw(0x1d, 0x3, 0x1) getpeername(r0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000006c0)={{0xeeee8000, 0x0, 0x8, 0x5, 0x1, 0x1, 0x80, 0x1, 0xfd, 0xd9, 0x33, 0x4}, {0xeeef0000, 0xffff1000, 0x8, 0xb, 0x6, 0x12, 0x5, 0x0, 0x1, 0x0, 0xa4, 0x4}, {0xdddd0000, 0xd000, 0x8, 0x81, 0x2, 0x5, 0x1, 0x10, 0x9, 0xf, 0xb3, 0x7f}, {0x2, 0xeeee0000, 0x10, 0x6, 0x0, 0x14, 0x5, 0x7, 0x0, 0x6, 0xe, 0x8}, {0x10000, 0x4, 0xe, 0x8, 0x5, 0x3b, 0xcc, 0x5, 0x5, 0x7, 0x9, 0xa}, {0x5000, 0xf000, 0x9, 0x7, 0x1, 0x8, 0x6, 0x4, 0x1, 0xff, 0x6, 0x9}, {0xf000, 0x5000, 0x3, 0x4, 0x2, 0xbf, 0x10, 0x7, 0x4, 0x5, 0xfd, 0x6}, {0xd000, 0x4000, 0x8, 0x40, 0x2, 0x4, 0xb, 0x9, 0xac, 0x6, 0x33, 0x2}, {0xdddd1000}, {0x0, 0x2}, 0xa0020008, 0x0, 0x4000, 0x2011, 0x7, 0xc000, 0x808e000, [0x8, 0x5, 0xf, 0x5]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.216402147s ago: executing program 7 (id=1576): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000011860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 2.152147451s ago: executing program 5 (id=1577): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfff8, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="201207000000000100f4000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.248314354s ago: executing program 0 (id=1580): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0xe8bc, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) (fail_nth: 35) 1.086612547s ago: executing program 0 (id=1581): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000010000000080001004d00000008000300", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x400000000000000, 0x8050}, 0x240048c0) 1.085646274s ago: executing program 7 (id=1582): r0 = socket$pppoe(0x18, 0x1, 0x0) pread64(r0, &(0x7f0000000000)=""/84, 0x54, 0x9) r1 = syz_usb_connect$sierra_net(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x8, 0x2, 0x20, 0x0, 0xc, 0x74}, {0x9, 0x5, 0x2, 0x2, 0x10, 0x3, 0x5, 0xfc}, {0x9, 0x5, 0xc, 0x3, 0x20, 0x3, 0x7f, 0x2}}}}}}]}}, 0x0) syz_usb_disconnect(r1) r2 = socket$rds(0x15, 0x5, 0x0) r3 = syz_usb_connect$uac1(0x2, 0xcb, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9, 0x3, 0x1, 0xe, 0x90, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xc}, [@mixer_unit={0xa, 0x24, 0x4, 0x4, 0xc, "a74955c24c"}, @feature_unit={0xd, 0x24, 0x6, 0x6, 0x4, 0x3, [0x7, 0x7, 0x5], 0x3}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x94c9, 0x4, 'H'}, @mixer_unit={0x7, 0x24, 0x4, 0x4, 0xa, "9e80"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x1, 0x2, 0xb, 0x8, "67ff"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x9, 0x5}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x0, 0x4, 0x8, 0xf, "8bbe8065"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0xf7, 0x1, {0x7, 0x25, 0x1, 0x0, 0x56, 0x8001}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1, 0x2, 0x4, 0x4, "67db5f", "1d54"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x1, 0x3, 0xcb, "c1a4"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0xfb, 0x5, {0x7, 0x25, 0x1, 0x80, 0x10, 0xf800}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x0, 0x5, 0x5, 0x4, 0x10, 0x1}, 0x2e, &(0x7f0000000200)={0x5, 0xf, 0x2e, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x4b, "b2aed12b431be87c479e6bf3ffa0563b"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x7, 0xff, 0x9, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xa, 0x8, 0x400}]}, 0x2, [{0xfc, &(0x7f0000000240)=@string={0xfc, 0x3, "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"}}, {0xe7, &(0x7f0000000340)=@string={0xe7, 0x3, "557902d319553b61585bd7c312a1350b744788104f82cf148ee09ccd2135d8d1129d508190b07e30dd65bede80a5618ddea4076256a01b663bb1d1ff571a8be7367e2357bd7989432cf3fcbff04e7d45ea865cc03f246ca33d2d17ec9e9f6792ab236b53989e2391457bd2b7d34fe9cd6228f8de7d746ec5720d77a68e8d6b1c00bc00be7b5ca9c3b74d22d8493188d8d61f84811bee4c346128c37ef833796d6cf7bfe6bd580161d6cc67495ea6bb79162e8c32877abad141ab184d2cfa6f3278d1a667310f6c34a558d931cb8a423b2519a20f1fff9894dd078efe8bcf73415e1c2e9d33"}}]}) syz_usb_control_io$uac1(r3, &(0x7f0000000580)={0x14, &(0x7f0000000480)={0x20, 0x5, 0x20, {0x20, 0x21, "10817e641b61c3a726c76869d92141bf4020f7702baa17b957fd53108b43"}}, &(0x7f00000004c0)={0x0, 0x3, 0x88, @string={0x88, 0x3, "e7085ac8680880cabdaed4bd6d0d40c9516fb41f27734ab4b91c7a3e24c0f162b56a9faf68c94c38c2c02e64dce5ac8ea9f64e8474d830deb07d050d59ef7d67d7cd45546884d03f2b41285462a6879932982eb46686a4ea76a1c25ea95c37d9224c343ce68d42f276b1a1367ebac320caf4c9e90469d97e5c140c0103727d69abd3511a2e7a"}}}, &(0x7f0000000840)={0x44, &(0x7f00000005c0)={0x20, 0x12, 0x85, "3f6aafa92f8651ad034ce5a0c4d2d84d9ca35e5509f75d04608b8ba3abb278ca9b5cd0cb5bed3e4512a966a5a062f85e7ae7214eb04d6402747e962dbd476a88161950319e18e277d1275d0eb3a24c928a714a3a5519a64422f5353a51669e850c336e34ae4be9c81ace9d3e7a3d1dab704d5a4a394aae240837b1b5dda8f89620535ac379"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000700)={0x20, 0x81, 0x3, "56a569"}, &(0x7f0000000740)={0x20, 0x82, 0x2, "cb08"}, &(0x7f0000000780)={0x20, 0x83, 0x2, "9933"}, &(0x7f00000007c0)={0x20, 0x84, 0x3, "64147b"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "b66f3b"}}) r4 = syz_usb_connect$cdc_ecm(0x3, 0x74, &(0x7f00000008c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0x5e, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x23, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x6, 0x24, 0x6, 0x0, 0x0, 'R'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1, 0x8d1c, 0x5}, [@ncm={0x6, 0x24, 0x1a, 0x4, 0x8}, @ncm={0x6, 0x24, 0x1a, 0xfff8}, @ncm={0x6, 0x24, 0x1a, 0xf, 0x20}, @acm={0x4, 0x24, 0x2, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0xf, 0x81, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0x8, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x68, 0xba, 0x9, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xab, 0x7, 0xdc}}}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x110, 0x1, 0x5, 0x47, 0xff, 0x7b}, 0xc7, &(0x7f0000000980)={0x5, 0xf, 0xc7, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0xc, 0x16, 0x1}, @generic={0xad, 0x10, 0x3, "5a5f17fcf40a82312ea24848158b6da6842d0119987adb28e784c2973d476eef895430582c499996ffa6668ac415909e571b760049b6457c992dcc6b83bfafe20dc4acf8feff89aa502dea1e63101a2a0a9f91dbe9e026699d6153ca5f9bcbc65961fe6d434bc6a506b40e550942688008b12db4ce4132d9865fd3c1fb4e4a9d96ac59906f248c01ac8a97e294cc6a2ef5c50b082c195c8ea19bf51458100a848e0ffb23c2514bde2c53"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x2, 0x9, 0xc3, 0x14dd, 0x8}]}, 0x2, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x180c}}]}) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000b40), 0x4000, 0x0) preadv2(r5, &(0x7f0000000e40)=[{&(0x7f0000000b80)=""/166, 0xa6}, {&(0x7f0000000c40)=""/71, 0x47}, {&(0x7f0000000cc0)=""/231, 0xe7}, {&(0x7f0000000dc0)=""/31, 0x1f}, {&(0x7f0000000e00)=""/50, 0x32}], 0x5, 0x101, 0xa95, 0x8) syz_usb_ep_read(r4, 0x5, 0x84, &(0x7f0000000ec0)=""/132) write(r0, &(0x7f0000000f80)="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", 0x1000) syz_usb_ep_write(0xffffffffffffffff, 0x8, 0x9, &(0x7f0000001f80)="20d46a68ce4e77a663") syz_open_dev$dri(&(0x7f0000001fc0), 0x10, 0x28000) bind$inet6(r5, &(0x7f0000002000)={0xa, 0x4e23, 0x7, @empty, 0x9}, 0x1c) syz_usb_ep_write(r1, 0x7, 0x73, &(0x7f0000002040)="e839150fa28c77284a574745cbaf21254daea68570ede83ab0153c7d22b00d2cad591416608bc27060ebf0f9af2e26c62e08dad2747caa1a812d0560e79022846941f21c2da6544668e5018289afdb41b7963c9030c57f5eec13df06b29e5d6d38a921cca15b2058401e953ff1728d8f10c80f") syz_usb_connect$hid(0x4, 0x36, &(0x7f00000020c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x4f2, 0x1123, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf1, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x8, 0x7a, 0x1, {0x22, 0x255}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xa, 0x9, 0xb}}}}}]}}]}}, &(0x7f00000022c0)={0xa, &(0x7f0000002100)={0xa, 0x6, 0x310, 0x9, 0xc9, 0x9, 0x40, 0x6}, 0x1a, &(0x7f0000002140)={0x5, 0xf, 0x1a, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x6, 0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0xfb, 0x6, 0x3cfc, 0x9}]}, 0x5, [{0x4, &(0x7f0000002180)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f00000021c0)=@lang_id={0x4, 0x3, 0x44f}}, {0x9, &(0x7f0000002200)=@string={0x9, 0x3, "1434a87fa349a1"}}, {0x4, &(0x7f0000002240)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000002280)=@lang_id={0x4, 0x3, 0xc28}}]}) r6 = dup(r2) ioctl$SIOCX25GSUBSCRIP(r6, 0x89e0, &(0x7f0000002340)={'macvtap0\x00', 0x5, 0x400}) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000002440)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, &(0x7f0000002580)={r7, &(0x7f0000002480)=""/219}) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r5, 0x4068aea3, &(0x7f00000025c0)={0xed, 0x0, 0x9}) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002640), 0x180, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000002680)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000002ac0)={&(0x7f0000002740)=[0x0, 0x0, 0x0], &(0x7f0000002780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000002a40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002a80)=[0x0], 0xa, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r6, 0xc04064aa, &(0x7f0000002b40)={&(0x7f00000026c0)=[0x0], &(0x7f0000002700)=[{}], r10, 0x0, '\x00', 0x1, 0x1}) sendmsg$nl_route(r5, &(0x7f0000002c40)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000002c80)=0x369d) syz_usb_ep_read(r4, 0x8, 0xe0, &(0x7f0000002cc0)=""/224) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000002e40)={0x14, &(0x7f0000002dc0)={0x0, 0x7, 0x27, {0x27, 0x6, "bea405d65772c59a349da8a3fc842ae730ad32461d13221fcc2ceda1e981d178ec40358b16"}}, &(0x7f0000002e00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003100)={0x44, &(0x7f0000002e80)={0x0, 0x10, 0x80, "419878b2ef5eb9fe083b568464b6d9bd04366c2a6f88f20aa2b73065f078495d65980567b38b5157d9c84c29cd48bf91706c2397d389317205c8bedf0d3ec2148c878c6f3eaaee48a06f753dd19575115206b8268091d48e0f8b6f5b134f1afb170d6e196dc948b6efb7bb674cc5e359766c99703486a66e073aa3e6628314b8"}, &(0x7f0000002f40)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000002f80)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000002fc0)={0x20, 0x80, 0x1c, {0x8, 0x3, 0x4, 0x9, 0x2, 0xd7, 0xff, 0x9, 0x5, 0x5, 0x9, 0x10}}, &(0x7f0000003000)={0x20, 0x85, 0x4, 0x2a}, &(0x7f0000003040)={0x20, 0x83, 0x2}, &(0x7f0000003080)={0x20, 0x87, 0x2, 0x800}, &(0x7f00000030c0)={0x20, 0x89, 0x2}}) 971.595251ms ago: executing program 4 (id=1583): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BLKOPENZONE(r0, 0x40101286, &(0x7f0000000040)={0xfffffffffffff41f, 0x3726}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000025c0)={0x2020}, 0x2020) 888.107197ms ago: executing program 6 (id=1584): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002800000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x181, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) open_tree(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00'}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x901, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/oops_count', 0x200, 0xa) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/oops_count', 0x200, 0xa) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000002d40)={0x54, 0x12, 0x905, 0x70bd26, 0x25dfdbfd, {0xa, 0x9, 0x4, 0x0, {0x4e22, 0x4e23, [0xfffffffb, 0x924, 0x6, 0x80000001], [0xfffffffd, 0x5, 0x1, 0x2], 0x0, [0x800, 0x1000]}, 0x0, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "03000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x22000010}, 0x4804) (async) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000002d40)={0x54, 0x12, 0x905, 0x70bd26, 0x25dfdbfd, {0xa, 0x9, 0x4, 0x0, {0x4e22, 0x4e23, [0xfffffffb, 0x924, 0x6, 0x80000001], [0xfffffffd, 0x5, 0x1, 0x2], 0x0, [0x800, 0x1000]}, 0x0, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "03000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x22000010}, 0x4804) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) (async) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8, 0x9903}) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = fcntl$dupfd(r7, 0x0, r7) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) fsync(0xffffffffffffffff) (async) fsync(0xffffffffffffffff) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, &(0x7f0000000000)) (async) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, &(0x7f0000000000)) 887.782046ms ago: executing program 0 (id=1585): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x40000000}, {0x66, 0x0, 0x0, 0x2000000}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x2000}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 887.295392ms ago: executing program 4 (id=1586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000220000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32001400003400038030000080090006400000000024000b8020000180070001006374000014000280080001400000000008000240000000000900010073797a30"], 0xe4}}, 0x0) 835.832447ms ago: executing program 4 (id=1587): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}}}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000014c0)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {}, {0xd, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x3, 0xfff2}}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000001100a200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, 0x0}, 0x94) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x68, r7, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x83, @media='ib\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) recvmmsg(r3, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/183, 0xb7}, {&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000002900)=""/4111, 0x100f}, {&(0x7f0000000140)=""/75, 0x4b}, {&(0x7f0000000500)=""/221, 0xdd}, {&(0x7f0000000880)=""/253, 0xfd}, {&(0x7f00000001c0)=""/21, 0x15}], 0x8}, 0x80000000}], 0x4, 0x4022, 0x0) 811.83735ms ago: executing program 0 (id=1588): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1, 0x0, 0xe0}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) 628.236157ms ago: executing program 4 (id=1589): r0 = io_uring_setup(0x7277, &(0x7f0000000000)={0x0, 0x327f, 0x4000, 0x3, 0x178}) io_uring_enter(r0, 0x6d9f, 0xc1f, 0x1, &(0x7f0000000080), 0x8) splice(r0, &(0x7f00000000c0)=0x1a0, r0, &(0x7f0000000100)=0x7, 0x4, 0x1) r1 = socket$isdn(0x22, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = accept(r1, 0x0, &(0x7f0000000140)) bind$rds(r3, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000200), &(0x7f0000000240)='%-010d \x00'}, 0x20) r5 = fspick(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000300)='%-010d \x00', &(0x7f0000000340)='%-010d \x00', 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) sendto$inet(r6, &(0x7f00000003c0)="3a50519983658ce97f74cc1fda27ea06ddb980bf2a54d6726ea8cb195eee1de9cb083c48df317e64e816e00b23e9d551d98cd196c2a05252f695eb9423b5c3a9edc854d501870b0f143f3943f25cef60363f76de612f743bb7b3b046aef580d3acf94d789094ae9e47a1ec6625b364ddb2bde57fd41a263b5666102dbdec1d8341bba020cebbfa1b73a80e4bf094be2f16d1dca76b2ae56fd13c32e80704fd7ba6a84241e9d410e78789c9deb2612c6f9c2ebae5e3aa97548321c4b3a6eafd15c0eeb6b2ff801120", 0xc8, 0x20000000, &(0x7f00000004c0)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000500), &(0x7f0000000540)=0x4) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r3) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000680)={'ip_vti0\x00', &(0x7f0000000600)={'ip_vti0\x00', 0x0, 0x7, 0x20, 0x8, 0x9, {{0xd, 0x4, 0x1, 0x3, 0x34, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010100, @rand_addr=0x64010100, {[@rr={0x7, 0x1f, 0xf, [@dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010101, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000006c0)={'wg2\x00', 0x0}) getsockname$packet(r3, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000740)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f0000000780)={'ip_vti0\x00', 0x0, 0x10f, 0x7a1, 0x5, 0xa7, {{0x28, 0x4, 0x2, 0x2b, 0xa0, 0x66, 0x0, 0x3, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x27, 0x1f, [@multicast1, @loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, @empty, @local, @local]}, @lsrr={0x83, 0xf, 0x29, [@loopback, @loopback, @multicast2]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x10, 0x0, [{0x2, 0xa, "6c96383034da8b5e"}]}, @lsrr={0x83, 0xb, 0x82, [@rand_addr=0x64010101, @loopback]}, @ra={0x94, 0x4}, @cipso={0x86, 0x18, 0x3, [{0x5, 0x9, "1fe53031f349eb"}, {0x2, 0x9, "110f547984f3fe"}]}, @end, @lsrr={0x83, 0xf, 0xa3, [@loopback, @rand_addr=0x64010100, @multicast2]}, @ssrr={0x89, 0xb, 0x93, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000880)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f00000009c0)={&(0x7f0000000580), 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x94, r7, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x44010}, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000a00)=0x10001) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000a40)=0x1) ioctl$NBD_SET_FLAGS(r6, 0xab0a, 0x8c) r13 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x882, 0x8e) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r13, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x7, r13, 0x0, 0x30001, 0x0, 0x4, 0x322d91, 0x10dfff}) chdir(&(0x7f0000000b40)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b80)='./cgroup.cpu/syz0\x00', 0x1ff) 596.938637ms ago: executing program 0 (id=1590): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000004c0)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x0, 0xfffffffc, 0xc3c5, 0x40, 0x4], 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}]}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x16c0, 0x5e1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xc, 0x3}}}}}]}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000800030000000000000061000000d5b18cea8ad14b3edafab42018c0000000", @ANYRES32=r5, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500070000000800050006000000"], 0x4c}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 582.178583ms ago: executing program 4 (id=1591): syz_emit_ethernet(0xae, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff80, [{0x5, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "fee9fffffff5000000000000"}, {0x1, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) 436.3836ms ago: executing program 4 (id=1592): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000000c0), 0x4c, 0x24000000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_dev$rtc(0x0, 0xe92, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7006) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad000000", 0x4) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0xfffffdef}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0xfffffdef}], 0x299, 0xfdef) 231.631084ms ago: executing program 6 (id=1593): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="3c000e0080000000ffffffffffff0802110000007d5d697d41d500000000000000000000640001000301b9040605010300ff7f7107ff000000000361080026006c09000008000c006400000008000d0000"], 0x70}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) close(0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)={0x40, r6, 0xb97534d5fe9704cf, 0x46, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{0x4, 0x1}, {0x60, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) 68.2431ms ago: executing program 6 (id=1594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close(r0) 0s ago: executing program 6 (id=1595): openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x71a2b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x56}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) fsopen(0x0, 0x1) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x1000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = open(0x0, 0x108843, 0x98) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000100)) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r4, 0x0, 0x0) recvmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) open(0x0, 0x14a600, 0x78e22799f4a46f8f) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x0, 0x8, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0xfffffffffffffe33, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r7, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x1d8, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a01eae207639125e85bd4b4f1d097ab26e0c5d9552f080f9"}]}, @NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="be24af12a7415f36cb81e41fa800740a07407cdd8350ae8084e65b677662fb2f"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="19bd86400bc10475fe10f9754a022a31"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="158c6ba971b13398b77f2d3c67083c33"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9e191435bbca61b7"}]}, @NL80211_ATTR_REKEY_DATA={0xac, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9f24080c7528743cc609784f13ad62cf"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3ac826e7c8c7776203058f5f3df4fa514dabaa8e3da12f196e8eaaa5c16fdb7e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="0d03c76717d30bd18bf35e9cdab58572"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3d8c3545db7c64d7d376fa6393a7abb6828a81f6a2ce3d71d3f18e7f4672514c"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="219452d920c023be7ffea3f0e7f543c6e9380f2314a36fb8"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="9eb3a3b08512aa15f026347193adb5d5c47561ab842755a8"}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c13f678f2e7faac0"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4663e1df5b807340"}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="1815c918297fca03ba7f9dbae7e83f20"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="18312fa544fd3561334a72025b892b6b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a7842aa45d711c7b"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eb155feea49dae29b5d7f07aba03ad1b"}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ab0792bab8c32bc3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "96f36eae63d8ffd1"}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) sendmsg$NFT_BATCH(r5, 0x0, 0x20000000) kernel console output (not intermixed with test programs): butes in process `syz.4.1151'. [ 410.307856][T10595] ALSA: mixer_oss: invalid OSS volume '' [ 410.326694][T10597] binder: 10596:10597 ioctl 80489439 200000000380 returned -22 [ 410.430968][ T10] hid-generic 00A0:0006:0003.002E: unknown main item tag 0x0 [ 410.442357][ T10] hid-generic 00A0:0006:0003.002E: unknown main item tag 0x0 [ 410.450018][ T10] hid-generic 00A0:0006:0003.002E: unknown main item tag 0x0 [ 410.457857][ T10] hid-generic 00A0:0006:0003.002E: unknown main item tag 0x0 [ 410.465589][ T10] hid-generic 00A0:0006:0003.002E: unknown main item tag 0x0 [ 410.473640][ T1206] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 410.474261][ T10] hid-generic 00A0:0006:0003.002E: unknown main item tag 0x0 [ 410.499328][ T24] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 410.522482][ T10] hid-generic 00A0:0006:0003.002E: unknown main item tag 0x0 [ 410.531421][ T10] hid-generic 00A0:0006:0003.002E: unknown main item tag 0x0 [ 410.550642][ T10] hid-generic 00A0:0006:0003.002E: hidraw0: HID v0.05 Device [syz1] on syz0 [ 410.666102][ T1206] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 410.677758][ T1206] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 410.690400][ T1206] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 410.702345][ T24] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 410.712592][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.723365][ T1206] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 410.740448][ T24] usb 6-1: config 0 descriptor?? [ 410.743747][ T92] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 410.778192][ T1206] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 410.816574][ T1206] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 410.825880][ T1206] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 410.834460][ T1206] usb 7-1: Product: syz [ 410.838831][ T1206] usb 7-1: Manufacturer: syz [ 410.877949][ T1206] cdc_wdm 7-1:1.0: skipping garbage [ 410.889244][ T1206] cdc_wdm 7-1:1.0: skipping garbage [ 410.900313][ T1206] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 410.912848][ T1206] cdc_wdm 7-1:1.0: Unknown control protocol [ 410.937603][ T92] usb 1-1: config 0 has no interfaces? [ 410.960786][T10602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.971343][T10602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.979291][ T92] usb 1-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 410.989768][ T1206] usb 6-1: USB disconnect, device number 41 [ 411.006294][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.026566][ T92] usb 1-1: config 0 descriptor?? [ 411.234491][T10605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.264805][T10605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.482586][T10609] nfs: Unknown parameter 'mºœ¶bz#hÁ5[W"' [ 411.920986][T10613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.930409][T10613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.123635][ T24] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 412.181659][T10616] FAULT_INJECTION: forcing a failure. [ 412.181659][T10616] name failslab, interval 1, probability 0, space 0, times 0 [ 412.195573][T10616] CPU: 1 UID: 0 PID: 10616 Comm: syz.7.1160 Not tainted syzkaller #0 PREEMPT(full) [ 412.195597][T10616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 412.195604][T10616] Call Trace: [ 412.195609][T10616] [ 412.195614][T10616] dump_stack_lvl+0x16c/0x1f0 [ 412.195639][T10616] should_fail_ex+0x512/0x640 [ 412.195655][T10616] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 412.195674][T10616] should_failslab+0xc2/0x120 [ 412.195687][T10616] __kmalloc_cache_noprof+0x6a/0x3e0 [ 412.195704][T10616] ? subflow_create_ctx+0x9b/0x2c0 [ 412.195722][T10616] subflow_create_ctx+0x9b/0x2c0 [ 412.195737][T10616] subflow_ulp_init+0xc3/0x4d0 [ 412.195752][T10616] tcp_set_ulp+0x329/0x7f0 [ 412.195770][T10616] mptcp_subflow_create_socket+0x361/0xed0 [ 412.195790][T10616] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 412.195811][T10616] __mptcp_nmpc_sk+0x182/0x890 [ 412.195822][T10616] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 412.195840][T10616] ? __local_bh_enable_ip+0xa4/0x120 [ 412.195866][T10616] mptcp_pm_nl_create_listen_socket+0x3e1/0x760 [ 412.195888][T10616] ? __pfx_mptcp_pm_nl_create_listen_socket+0x10/0x10 [ 412.195907][T10616] ? mptcp_pm_nl_add_addr_doit+0x1e6/0xc80 [ 412.195920][T10616] ? __asan_memcpy+0x3c/0x60 [ 412.195938][T10616] mptcp_pm_nl_add_addr_doit+0x26d/0xc80 [ 412.195954][T10616] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 412.195975][T10616] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 412.195993][T10616] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 412.196013][T10616] genl_family_rcv_msg_doit+0x209/0x2f0 [ 412.196030][T10616] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 412.196050][T10616] ? bpf_lsm_capable+0x9/0x10 [ 412.196066][T10616] ? security_capable+0x7e/0x260 [ 412.196080][T10616] ? ns_capable+0xd7/0x110 [ 412.196094][T10616] genl_rcv_msg+0x55c/0x800 [ 412.196112][T10616] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.196128][T10616] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 412.196146][T10616] netlink_rcv_skb+0x155/0x420 [ 412.196161][T10616] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.196177][T10616] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 412.196197][T10616] ? netlink_deliver_tap+0x1ae/0xd30 [ 412.196213][T10616] genl_rcv+0x28/0x40 [ 412.196227][T10616] netlink_unicast+0x5aa/0x870 [ 412.196243][T10616] ? __pfx_netlink_unicast+0x10/0x10 [ 412.196258][T10616] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 412.196276][T10616] netlink_sendmsg+0x8d1/0xdd0 [ 412.196292][T10616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.196312][T10616] ____sys_sendmsg+0xa98/0xc70 [ 412.196330][T10616] ? copy_msghdr_from_user+0x10a/0x160 [ 412.196345][T10616] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.196371][T10616] ___sys_sendmsg+0x134/0x1d0 [ 412.196393][T10616] ? __pfx____sys_sendmsg+0x10/0x10 [ 412.196431][T10616] __sys_sendmsg+0x16d/0x220 [ 412.196445][T10616] ? __pfx___sys_sendmsg+0x10/0x10 [ 412.196467][T10616] do_syscall_64+0xcd/0x4e0 [ 412.196484][T10616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.196495][T10616] RIP: 0033:0x7f47cbd8eec9 [ 412.196505][T10616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.196516][T10616] RSP: 002b:00007f47c9ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.196528][T10616] RAX: ffffffffffffffda RBX: 00007f47cbfe5fa0 RCX: 00007f47cbd8eec9 [ 412.196535][T10616] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 412.196541][T10616] RBP: 00007f47c9ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 412.196547][T10616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 412.196553][T10616] R13: 00007f47cbfe6038 R14: 00007f47cbfe5fa0 R15: 00007ffc8fabed08 [ 412.196566][T10616] [ 412.561869][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.667975][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 412.679353][ T24] usb 6-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 412.690079][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.716276][ T24] usb 6-1: config 0 descriptor?? [ 412.747366][T10611] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 413.259774][ T5947] usb 7-1: USB disconnect, device number 28 [ 413.303945][ T5909] usb 1-1: USB disconnect, device number 78 [ 413.397515][ T24] hid_parser_main: 6 callbacks suppressed [ 413.397536][ T24] hid-udraw 0003:20D6:CB17.002F: unknown main item tag 0x0 [ 413.449050][ T30] audit: type=1400 audit(1758987526.820:829): avc: denied { read } for pid=10624 comm="syz.7.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 413.546213][ T24] hid-udraw 0003:20D6:CB17.002F: unknown main item tag 0x0 [ 413.563633][ T24] hid-udraw 0003:20D6:CB17.002F: item fetching failed at offset 3/5 [ 413.571968][ T24] hid-udraw 0003:20D6:CB17.002F: parse failed [ 413.584003][ T24] hid-udraw 0003:20D6:CB17.002F: probe with driver hid-udraw failed with error -22 [ 413.863849][ T5909] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 414.075422][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 414.101981][ T5909] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 414.123279][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 414.147148][ T5909] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 414.198606][ T5909] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 414.198713][ T10] usb 6-1: USB disconnect, device number 42 [ 414.219470][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.311778][ T5909] usb 1-1: Product: syz [ 414.316589][ T5909] usb 1-1: Manufacturer: syz [ 414.321204][ T5909] usb 1-1: SerialNumber: syz [ 414.339133][ T5909] usb 1-1: config 0 descriptor?? [ 414.356411][ T5909] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 414.380970][ T30] audit: type=1400 audit(1758987527.770:830): avc: denied { setopt } for pid=10640 comm="syz.6.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 414.570479][T10628] binder: transaction release 31 bad handle 1, ret = -22 [ 414.592316][ T5909] scsi host1: usb-storage 1-1:0.0 [ 414.602883][ T5909] usb 1-1: USB disconnect, device number 79 [ 415.472437][ T30] audit: type=1400 audit(1758987528.860:831): avc: denied { connect } for pid=10654 comm="syz.6.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 415.843866][ T10] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 415.900708][ T10] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 415.916462][T10661] FAULT_INJECTION: forcing a failure. [ 415.916462][T10661] name failslab, interval 1, probability 0, space 0, times 0 [ 415.936812][T10661] CPU: 1 UID: 0 PID: 10661 Comm: syz.4.1172 Not tainted syzkaller #0 PREEMPT(full) [ 415.936838][T10661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 415.936849][T10661] Call Trace: [ 415.936855][T10661] [ 415.936862][T10661] dump_stack_lvl+0x16c/0x1f0 [ 415.936892][T10661] should_fail_ex+0x512/0x640 [ 415.936914][T10661] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 415.936936][T10661] should_failslab+0xc2/0x120 [ 415.936954][T10661] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 415.936971][T10661] ? __kernfs_new_node+0xd2/0x8e0 [ 415.936997][T10661] __kernfs_new_node+0xd2/0x8e0 [ 415.937020][T10661] ? kernfs_add_one+0x37d/0x840 [ 415.937045][T10661] ? __pfx___kernfs_new_node+0x10/0x10 [ 415.937073][T10661] ? find_held_lock+0x2b/0x80 [ 415.937096][T10661] ? kernfs_root+0xee/0x2a0 [ 415.937123][T10661] kernfs_new_node+0x13c/0x1e0 [ 415.937155][T10661] __kernfs_create_file+0x53/0x350 [ 415.937176][T10661] sysfs_add_file_mode_ns+0x207/0x3c0 [ 415.937204][T10661] sysfs_create_file_ns+0x13d/0x1d0 [ 415.937226][T10661] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 415.937245][T10661] ? down_read+0x13d/0x480 [ 415.937270][T10661] ? __pfx___up_read+0x10/0x10 [ 415.937288][T10661] ? acpi_device_notify+0x351/0x480 [ 415.937311][T10661] device_create_file+0xf2/0x1e0 [ 415.937349][T10661] device_add+0x2bf/0x1aa0 [ 415.937374][T10661] ? __pfx_dev_set_name+0x10/0x10 [ 415.937390][T10661] ? __pfx_device_add+0x10/0x10 [ 415.937413][T10661] ? lockdep_init_map_type+0x5c/0x280 [ 415.937432][T10661] ? __init_waitqueue_head+0xca/0x150 [ 415.937457][T10661] netdev_register_kobject+0x1a9/0x3d0 [ 415.937486][T10661] register_netdevice+0x13dc/0x2270 [ 415.937514][T10661] ? __pfx_register_netdevice+0x10/0x10 [ 415.937537][T10661] ? dev_addr_mod+0x316/0x540 [ 415.937557][T10661] ip6gre_newlink_common.constprop.0+0x14e/0x340 [ 415.937576][T10661] ? __pfx_ip6gre_newlink_common.constprop.0+0x10/0x10 [ 415.937594][T10661] ? lockdep_rtnl_is_held+0x26/0x40 [ 415.937610][T10661] ? ip6gre_tunnel_find+0x36c/0x430 [ 415.937627][T10661] ip6gre_newlink+0x17d/0x400 [ 415.937643][T10661] ? __pfx_ip6gre_newlink+0x10/0x10 [ 415.937661][T10661] rtnl_newlink+0xc45/0x2000 [ 415.937692][T10661] ? __pfx_rtnl_newlink+0x10/0x10 [ 415.937712][T10661] ? find_held_lock+0x2b/0x80 [ 415.937732][T10661] ? avc_has_perm_noaudit+0x117/0x3b0 [ 415.937755][T10661] ? avc_has_perm_noaudit+0x149/0x3b0 [ 415.937795][T10661] ? find_held_lock+0x2b/0x80 [ 415.937814][T10661] ? __pfx_rtnl_newlink+0x10/0x10 [ 415.937833][T10661] ? __pfx_rtnl_newlink+0x10/0x10 [ 415.937851][T10661] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 415.937871][T10661] ? __pfx_rtnl_newlink+0x10/0x10 [ 415.937890][T10661] rtnetlink_rcv_msg+0x95e/0xe90 [ 415.937914][T10661] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 415.937942][T10661] ? ref_tracker_free+0x37c/0x830 [ 415.937968][T10661] netlink_rcv_skb+0x155/0x420 [ 415.937993][T10661] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 415.938014][T10661] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 415.938043][T10661] ? netlink_deliver_tap+0x1ae/0xd30 [ 415.938068][T10661] netlink_unicast+0x5aa/0x870 [ 415.938093][T10661] ? __pfx_netlink_unicast+0x10/0x10 [ 415.938113][T10661] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 415.938140][T10661] netlink_sendmsg+0x8d1/0xdd0 [ 415.938166][T10661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.938196][T10661] ____sys_sendmsg+0xa98/0xc70 [ 415.938219][T10661] ? copy_msghdr_from_user+0x10a/0x160 [ 415.938237][T10661] ? __pfx_____sys_sendmsg+0x10/0x10 [ 415.938270][T10661] ___sys_sendmsg+0x134/0x1d0 [ 415.938291][T10661] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.938351][T10661] __sys_sendmsg+0x16d/0x220 [ 415.938372][T10661] ? __pfx___sys_sendmsg+0x10/0x10 [ 415.938404][T10661] do_syscall_64+0xcd/0x4e0 [ 415.938429][T10661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.938446][T10661] RIP: 0033:0x7f6b2098eec9 [ 415.938462][T10661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.938478][T10661] RSP: 002b:00007f6b1ebf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.938493][T10661] RAX: ffffffffffffffda RBX: 00007f6b20be5fa0 RCX: 00007f6b2098eec9 [ 415.938502][T10661] RDX: 0000000020040040 RSI: 0000200000000000 RDI: 0000000000000003 [ 415.938510][T10661] RBP: 00007f6b1ebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 415.938520][T10661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 415.938529][T10661] R13: 00007f6b20be6038 R14: 00007f6b20be5fa0 R15: 00007fff4da30948 [ 415.938552][T10661] [ 415.938739][ T10] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.248315][T10667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.504039][T10667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.573971][ T24] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 416.714256][T10669] FAULT_INJECTION: forcing a failure. [ 416.714256][T10669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.753691][T10669] CPU: 0 UID: 0 PID: 10669 Comm: syz.0.1177 Not tainted syzkaller #0 PREEMPT(full) [ 416.753718][T10669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 416.753729][T10669] Call Trace: [ 416.753736][T10669] [ 416.753744][T10669] dump_stack_lvl+0x16c/0x1f0 [ 416.753771][T10669] should_fail_ex+0x512/0x640 [ 416.753798][T10669] _copy_to_user+0x32/0xd0 [ 416.753823][T10669] simple_read_from_buffer+0xcb/0x170 [ 416.753843][T10669] proc_fail_nth_read+0x197/0x240 [ 416.753863][T10669] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 416.753883][T10669] ? rw_verify_area+0xcf/0x6c0 [ 416.753906][T10669] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 416.753924][T10669] vfs_read+0x1e4/0xcf0 [ 416.753944][T10669] ? __pfx___mutex_lock+0x10/0x10 [ 416.753967][T10669] ? __pfx_vfs_read+0x10/0x10 [ 416.753988][T10669] ? __fget_files+0x20e/0x3c0 [ 416.754014][T10669] ksys_read+0x12a/0x250 [ 416.754031][T10669] ? __pfx_ksys_read+0x10/0x10 [ 416.754055][T10669] do_syscall_64+0xcd/0x4e0 [ 416.754078][T10669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.754092][T10669] RIP: 0033:0x7f859818d8dc [ 416.754106][T10669] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 416.754120][T10669] RSP: 002b:00007f859909b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 416.754135][T10669] RAX: ffffffffffffffda RBX: 00007f85983e5fa0 RCX: 00007f859818d8dc [ 416.754146][T10669] RDX: 000000000000000f RSI: 00007f859909b0a0 RDI: 0000000000000003 [ 416.754156][T10669] RBP: 00007f859909b090 R08: 0000000000000000 R09: 0000000000000000 [ 416.754167][T10669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.754177][T10669] R13: 00007f85983e6038 R14: 00007f85983e5fa0 R15: 00007ffdf1d69208 [ 416.754200][T10669] [ 416.956081][ T24] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 416.965398][ T24] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 416.987815][ T10] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.995308][ T10] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 417.002747][ T10] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 417.010215][ T10] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 417.017621][ T10] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 417.029303][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 417.310214][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 417.440806][ T10] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.43 Device [syz1] on syz1 [ 417.486752][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 417.624506][ T24] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 417.634346][ T24] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 417.642493][ T24] usb 6-1: Product: syz [ 417.649596][ T24] usb 6-1: Manufacturer: syz [ 417.702823][T10682] nfs: Unknown parameter 'mºœ¶bz#hÁ5[W"' [ 418.072610][T10677] fido_id[10677]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 418.097662][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 418.105620][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 418.115561][ T24] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 418.122594][ T24] cdc_wdm 6-1:1.0: Unknown control protocol [ 419.507510][T10696] nfs: Unknown parameter 'mºœ¶bz#hÁ5[W"' [ 420.597308][ T24] usb 6-1: USB disconnect, device number 43 [ 422.149185][ T10] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 422.190621][ T30] audit: type=1326 audit(1758987535.580:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.0.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859818eec9 code=0x7ffc0000 [ 422.682359][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 422.842953][ T30] audit: type=1326 audit(1758987535.580:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.0.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859818eec9 code=0x7ffc0000 [ 422.867544][ T30] audit: type=1326 audit(1758987535.620:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.0.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f859818eec9 code=0x7ffc0000 [ 422.894293][ T10] usb 7-1: not running at top speed; connect to a high speed hub [ 422.907513][ T30] audit: type=1326 audit(1758987535.620:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.0.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859818eec9 code=0x7ffc0000 [ 422.937372][ T30] audit: type=1326 audit(1758987535.620:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.0.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859818eec9 code=0x7ffc0000 [ 422.966100][ T30] audit: type=1326 audit(1758987535.620:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.0.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f859818eec9 code=0x7ffc0000 [ 423.021406][ T30] audit: type=1326 audit(1758987535.620:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.0.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859818eec9 code=0x7ffc0000 [ 423.021406][ T10] usb 7-1: config 1 has an invalid interface number: 138 but max is 0 [ 423.021450][ T30] audit: type=1326 audit(1758987535.620:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.0.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859818eec9 code=0x7ffc0000 [ 423.086804][ T30] audit: type=1326 audit(1758987535.620:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.0.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859818eec9 code=0x7ffc0000 [ 423.137026][ T30] audit: type=1326 audit(1758987535.620:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.0.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f859818eec9 code=0x7ffc0000 [ 423.167550][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.246048][T10752] binder: 10748:10752 ioctl 80047213 200000000040 returned -22 [ 423.253826][T10750] binder: 10748:10750 ioctl 80047213 200000000040 returned -22 [ 423.413677][ T5994] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 423.520013][T10754] netlink: 802 bytes leftover after parsing attributes in process `syz.0.1197'. [ 424.023880][ T10] usb 7-1: config 1 has no interface number 0 [ 424.030060][ T10] usb 7-1: config 1 interface 138 altsetting 252 endpoint 0xC has invalid wMaxPacketSize 0 [ 424.040798][ T10] usb 7-1: config 1 interface 138 has no altsetting 0 [ 424.054277][ T10] usb 7-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 424.063377][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.077875][ T10] usb 7-1: Product: syz [ 424.082079][ T10] usb 7-1: Manufacturer: syz [ 424.086752][ T10] usb 7-1: SerialNumber: syz [ 424.191037][ T5994] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 424.239035][ T5994] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 424.504480][ T5994] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 424.552567][T10767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.564087][ T5994] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 424.575413][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 424.588738][T10767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.608378][ T5994] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 424.958866][ T10] usb 7-1: USB disconnect, device number 29 [ 424.967275][ T5994] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 424.983653][ T5994] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 425.025713][ T5994] usb 6-1: Product: syz [ 425.030643][ T5994] usb 6-1: Manufacturer: syz [ 425.035428][ T92] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 425.101522][ T5994] cdc_wdm 6-1:1.0: skipping garbage [ 425.133072][ T5994] cdc_wdm 6-1:1.0: skipping garbage [ 425.141886][ T5994] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 425.150454][ T5994] cdc_wdm 6-1:1.0: Unknown control protocol [ 425.166461][ T5947] hid-generic 00A0:0006:0003.0031: item fetching failed at offset 0/15 [ 425.175828][ T5947] hid-generic 00A0:0006:0003.0031: probe with driver hid-generic failed with error -22 [ 425.213885][ T92] usb 1-1: Using ep0 maxpacket: 32 [ 425.228055][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 425.258841][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 425.271728][ T92] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 425.287115][T10788] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1207'. [ 425.294446][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 48, changing to 9 [ 425.318305][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8240, setting to 1024 [ 425.334227][ T92] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 425.344590][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.352612][ T92] usb 1-1: Product: syz [ 425.358175][ T92] usb 1-1: Manufacturer: syz [ 425.378390][ T92] usb 1-1: SerialNumber: syz [ 425.386566][ T92] usb 1-1: config 0 descriptor?? [ 425.416527][ T92] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input45 [ 425.500891][ T5205] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 425.633688][T10797] FAULT_INJECTION: forcing a failure. [ 425.633688][T10797] name failslab, interval 1, probability 0, space 0, times 0 [ 425.730491][T10797] CPU: 1 UID: 0 PID: 10797 Comm: syz.6.1210 Not tainted syzkaller #0 PREEMPT(full) [ 425.730518][T10797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 425.730529][T10797] Call Trace: [ 425.730534][T10797] [ 425.730540][T10797] dump_stack_lvl+0x16c/0x1f0 [ 425.730567][T10797] should_fail_ex+0x512/0x640 [ 425.730586][T10797] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 425.730607][T10797] should_failslab+0xc2/0x120 [ 425.730627][T10797] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 425.730644][T10797] ? getname_kernel+0x52/0x370 [ 425.730670][T10797] getname_kernel+0x52/0x370 [ 425.730692][T10797] kern_path+0x1d/0x50 [ 425.730708][T10797] tomoyo_realpath_nofollow+0x87/0xf0 [ 425.730732][T10797] ? __pfx_tomoyo_realpath_nofollow+0x10/0x10 [ 425.730753][T10797] ? tomoyo_domain+0xbb/0x150 [ 425.730768][T10797] ? tomoyo_init_request_info+0x101/0x370 [ 425.730788][T10797] tomoyo_find_next_domain+0x2a8/0x20b0 [ 425.730815][T10797] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 425.730842][T10797] tomoyo_bprm_check_security+0x12e/0x1d0 [ 425.730858][T10797] ? tomoyo_bprm_check_security+0x120/0x1d0 [ 425.730876][T10797] security_bprm_check+0x1b9/0x1e0 [ 425.730897][T10797] bprm_execve+0x81a/0x1640 [ 425.730920][T10797] ? __pfx_bprm_execve+0x10/0x10 [ 425.730936][T10797] ? copy_string_kernel+0x460/0x520 [ 425.730959][T10797] do_execveat_common.isra.0+0x4a5/0x610 [ 425.730984][T10797] __x64_sys_execveat+0xda/0x120 [ 425.731005][T10797] do_syscall_64+0xcd/0x4e0 [ 425.731031][T10797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.731049][T10797] RIP: 0033:0x7fe5dad8eec9 [ 425.731065][T10797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.731082][T10797] RSP: 002b:00007fe5dbbb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 425.731103][T10797] RAX: ffffffffffffffda RBX: 00007fe5dafe6090 RCX: 00007fe5dad8eec9 [ 425.731115][T10797] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 425.731126][T10797] RBP: 00007fe5dbbb9090 R08: 0000000000000000 R09: 0000000000000000 [ 425.731135][T10797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 425.731145][T10797] R13: 00007fe5dafe6128 R14: 00007fe5dafe6090 R15: 00007ffdd3cc1d38 [ 425.731168][T10797] [ 426.073667][ T92] usb 1-1: USB disconnect, device number 80 [ 426.098851][ T5947] hid_parser_main: 75 callbacks suppressed [ 426.098870][ T5947] hid-generic 00A0:0006:0003.0032: unknown main item tag 0x0 [ 426.112227][ T5947] hid-generic 00A0:0006:0003.0032: unknown main item tag 0x0 [ 426.119784][ T5947] hid-generic 00A0:0006:0003.0032: unknown main item tag 0x0 [ 426.127280][ T5947] hid-generic 00A0:0006:0003.0032: unknown main item tag 0x0 [ 426.135180][ T5947] hid-generic 00A0:0006:0003.0032: unknown main item tag 0x0 [ 426.142966][ T5947] hid-generic 00A0:0006:0003.0032: unknown main item tag 0x0 [ 426.150587][ T5947] hid-generic 00A0:0006:0003.0032: unknown main item tag 0x0 [ 426.158549][ T5947] hid-generic 00A0:0006:0003.0032: unknown main item tag 0x0 [ 426.166018][ T5947] hid-generic 00A0:0006:0003.0032: unknown main item tag 0x0 [ 426.173467][ T5947] hid-generic 00A0:0006:0003.0032: unknown main item tag 0x0 [ 426.183236][ T5947] hid-generic 00A0:0006:0003.0032: hidraw0: HID v0.05 Device [syz1] on syz0 [ 426.342933][T10809] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1212'. [ 426.383771][ T5994] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 426.544517][ T5994] usb 7-1: Using ep0 maxpacket: 8 [ 426.553066][ T5994] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 426.562448][ T5994] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.573424][ T5994] usb 7-1: Product: syz [ 426.587096][ T5994] usb 7-1: Manufacturer: syz [ 426.592536][ T5994] usb 7-1: SerialNumber: syz [ 426.605363][ T5994] usb 7-1: config 0 descriptor?? [ 426.642020][ T5994] gspca_main: se401-2.14.0 probing 047d:5003 [ 426.729936][T10816] syzkaller1: entered promiscuous mode [ 426.736890][T10816] syzkaller1: entered allmulticast mode [ 427.309206][T10824] nfs: Unknown parameter 'mºœ¶bz#hÁ5[W"' [ 427.666281][ T5994] usb 7-1: reset high-speed USB device number 30 using dummy_hcd [ 427.874487][ T10] usb 6-1: USB disconnect, device number 44 [ 428.027514][T10827] batadv0: entered promiscuous mode [ 428.069004][T10827] macvtap1: entered promiscuous mode [ 428.081344][T10827] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 428.091807][T10827] batadv0: left promiscuous mode [ 428.512995][ T5994] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 428.522052][ T5994] se401 7-1:0.0: probe with driver se401 failed with error -71 [ 428.531860][ T5994] usb 7-1: USB disconnect, device number 30 [ 428.543643][ T5947] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 428.551229][ T5909] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 428.597848][T10841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 428.725942][ T5947] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 428.735188][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 428.747726][ T5947] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 428.758327][ T5909] usb 6-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 428.767588][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.775922][ T5947] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 428.787496][ T5947] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 428.799734][ T5909] usb 6-1: config 0 descriptor?? [ 428.804976][ T5947] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 428.818315][T10836] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 428.829123][ T5947] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 428.838535][ T5947] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 428.847616][ T5947] usb 8-1: Product: syz [ 428.852029][ T5947] usb 8-1: Manufacturer: syz [ 428.866119][ T5947] cdc_wdm 8-1:1.0: skipping garbage [ 428.871579][ T5947] cdc_wdm 8-1:1.0: skipping garbage [ 428.879907][ T5947] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 428.886136][ T5947] cdc_wdm 8-1:1.0: Unknown control protocol [ 429.116405][ T92] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 429.262422][ T5909] usbhid 6-1:0.0: can't add hid device: -71 [ 429.288575][ T5909] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 429.525756][ T5909] usb 6-1: USB disconnect, device number 45 [ 429.653755][ T92] usb 1-1: Using ep0 maxpacket: 32 [ 429.668149][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 429.680049][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 429.707609][ T92] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 429.727806][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 48, changing to 9 [ 429.752635][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8240, setting to 1024 [ 429.776551][ T92] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 429.928254][T10861] syzkaller1: entered promiscuous mode [ 429.951030][T10861] syzkaller1: entered allmulticast mode [ 430.528839][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.539775][ T92] usb 1-1: Product: syz [ 430.546412][ T92] usb 1-1: Manufacturer: syz [ 430.555938][ T92] usb 1-1: SerialNumber: syz [ 430.581365][T10866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.592490][T10866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.603157][ T92] usb 1-1: config 0 descriptor?? [ 430.616453][ T92] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input46 [ 430.655655][ T5205] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 430.688071][T10868] x_tables: ip6_tables: MASQUERADE target: only valid in nat table, not syz1 [ 430.698602][ T5205] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 430.720309][ T5205] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 430.737296][ C1] xpad 1-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 430.767819][ T5205] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 430.821356][ T92] usb 1-1: USB disconnect, device number 81 [ 431.368023][ T10] usb 8-1: USB disconnect, device number 4 [ 431.473900][ T92] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 431.861764][ T92] usb 7-1: device descriptor read/64, error -71 [ 431.976651][T10890] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1237'. [ 432.099022][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 432.099062][ T30] audit: type=1400 audit(1758987545.470:859): avc: denied { append } for pid=10891 comm="syz.0.1238" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 432.132756][ T92] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 432.473674][ T92] usb 7-1: device descriptor read/64, error -71 [ 432.585765][ T92] usb usb7-port1: attempt power cycle [ 432.667242][T10909] overlay: Unknown parameter 'subj_role' [ 432.703676][ T10] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 432.742470][T10914] netlink: 'syz.4.1246': attribute type 23 has an invalid length. [ 432.775735][T10914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.787346][T10914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.803921][ T5922] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 432.855044][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 432.866630][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 432.874969][ T1206] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 432.878117][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 432.897619][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 432.912179][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 432.923237][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.933132][ T10] usb 1-1: config 0 descriptor?? [ 432.938261][ T92] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 432.964303][ T92] usb 7-1: device descriptor read/8, error -71 [ 432.985623][ T5922] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 432.994432][ T5922] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.005545][ T5922] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 433.015140][ T5922] usb 6-1: config 1 has no interface number 1 [ 433.021765][ T5922] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 433.037249][ T1206] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 433.046352][ T1206] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 433.056909][ T1206] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 433.056925][ T5922] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 433.065981][ T1206] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 433.066019][ T1206] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 433.067614][ T1206] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 433.075711][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.089525][ T1206] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 433.098433][ T5922] usb 6-1: Product: syz [ 433.109980][ T1206] usb 8-1: Product: syz [ 433.115112][ T5922] usb 6-1: Manufacturer: syz [ 433.131229][ T1206] usb 8-1: Manufacturer: syz [ 433.132435][ T5922] usb 6-1: SerialNumber: syz [ 433.140967][ T1206] cdc_wdm 8-1:1.0: skipping garbage [ 433.154803][ T1206] cdc_wdm 8-1:1.0: skipping garbage [ 433.161336][ T1206] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 433.167965][ T1206] cdc_wdm 8-1:1.0: Unknown control protocol [ 433.233859][ T92] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 433.254318][ T92] usb 7-1: device descriptor read/8, error -71 [ 433.354483][T10899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.367810][T10899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.382195][ T92] usb usb7-port1: unable to enumerate USB device [ 433.390128][T10898] delete_channel: no stack [ 433.390493][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 433.403822][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 433.416898][ T5922] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 433.429852][ T5922] usb 6-1: MIDIStreaming interface descriptor not found [ 433.437404][ T10] usb 1-1: USB disconnect, device number 82 [ 433.452052][ T30] audit: type=1400 audit(1758987546.840:860): avc: denied { mounton } for pid=10915 comm="syz.4.1247" path="/file0" dev="bpf" ino=29223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=file permissive=1 [ 433.503778][ T5922] usb 6-1: USB disconnect, device number 46 [ 433.581989][T10922] x_tables: ip6_tables: MASQUERADE target: only valid in nat table, not syz1 [ 434.060556][T10928] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1250'. [ 434.076788][T10928] tipc: Enabled bearer , priority 0 [ 434.086920][T10928] syzkaller0: entered promiscuous mode [ 434.092491][T10928] syzkaller0: entered allmulticast mode [ 434.135539][T10928] tipc: Resetting bearer [ 434.141781][T10928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.156809][T10927] tipc: Resetting bearer [ 434.199761][T10927] tipc: Disabling bearer [ 434.243747][ T5922] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 434.277583][T10937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.304495][T10937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.434427][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 434.442169][ T5922] usb 1-1: config 0 has an invalid interface number: 248 but max is 0 [ 434.467548][ T5922] usb 1-1: config 0 has no interface number 0 [ 434.476979][ T5922] usb 1-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=83.0d [ 434.502331][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.520365][ T5922] usb 1-1: Product: syz [ 434.525301][ T5922] usb 1-1: Manufacturer: syz [ 434.530084][ T5922] usb 1-1: SerialNumber: syz [ 434.605076][ T5922] usb 1-1: config 0 descriptor?? [ 434.616135][ T5922] ttusb_dec_send_command: command bulk message failed: error -22 [ 434.652309][ T5922] ttusb-dec 1-1:0.248: probe with driver ttusb-dec failed with error -22 [ 434.768172][T10949] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1259'. [ 434.789499][T10949] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1259'. [ 435.183906][ T5922] usb 1-1: USB disconnect, device number 83 [ 435.396411][ T30] audit: type=1400 audit(1758987548.770:861): avc: denied { name_connect } for pid=10955 comm="syz.4.1261" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 435.703199][ T5947] usb 8-1: USB disconnect, device number 5 [ 436.567681][T10973] syzkaller1: entered promiscuous mode [ 436.620885][T10973] syzkaller1: entered allmulticast mode [ 436.647555][T10974] FAULT_INJECTION: forcing a failure. [ 436.647555][T10974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.672417][T10974] CPU: 1 UID: 0 PID: 10974 Comm: syz.0.1267 Not tainted syzkaller #0 PREEMPT(full) [ 436.672443][T10974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 436.672454][T10974] Call Trace: [ 436.672460][T10974] [ 436.672467][T10974] dump_stack_lvl+0x16c/0x1f0 [ 436.672496][T10974] should_fail_ex+0x512/0x640 [ 436.672522][T10974] _copy_from_iter+0x29f/0x1720 [ 436.672552][T10974] ? __pfx__copy_from_iter+0x10/0x10 [ 436.672574][T10974] ? __lock_acquire+0xb97/0x1ce0 [ 436.672598][T10974] ? _parse_integer_limit+0x17f/0x1d0 [ 436.672621][T10974] ? _kstrtoull+0x145/0x200 [ 436.672641][T10974] tun_get_user+0x26d/0x3cd0 [ 436.672673][T10974] ? __lock_acquire+0x62e/0x1ce0 [ 436.672702][T10974] ? __pfx_tun_get_user+0x10/0x10 [ 436.672729][T10974] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 436.672759][T10974] ? find_held_lock+0x2b/0x80 [ 436.672781][T10974] ? tun_get+0x191/0x370 [ 436.672810][T10974] tun_chr_write_iter+0xdc/0x210 [ 436.672837][T10974] vfs_write+0x7d0/0x11d0 [ 436.672856][T10974] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 436.672884][T10974] ? __pfx_vfs_write+0x10/0x10 [ 436.672899][T10974] ? find_held_lock+0x2b/0x80 [ 436.672934][T10974] ksys_write+0x12a/0x250 [ 436.672951][T10974] ? __pfx_ksys_write+0x10/0x10 [ 436.672973][T10974] do_syscall_64+0xcd/0x4e0 [ 436.672996][T10974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.673014][T10974] RIP: 0033:0x7f859818eec9 [ 436.673026][T10974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.673042][T10974] RSP: 002b:00007f859907a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 436.673059][T10974] RAX: ffffffffffffffda RBX: 00007f85983e6090 RCX: 00007f859818eec9 [ 436.673070][T10974] RDX: 00000000000000c2 RSI: 0000200000000080 RDI: 0000000000000003 [ 436.673080][T10974] RBP: 00007f859907a090 R08: 0000000000000000 R09: 0000000000000000 [ 436.673090][T10974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.673100][T10974] R13: 00007f85983e6128 R14: 00007f85983e6090 R15: 00007ffdf1d69208 [ 436.673130][T10974] [ 437.148689][ T30] audit: type=1400 audit(1758987550.540:862): avc: denied { getopt } for pid=10983 comm="syz.5.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 437.204063][ T92] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 437.281980][T10980] syzkaller1: entered promiscuous mode [ 437.289797][T10980] syzkaller1: entered allmulticast mode [ 437.335115][T10991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.378640][T10991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.385370][ T92] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 437.406494][ T92] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 437.493760][ T92] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 437.504143][ T92] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 437.551686][ T92] usb 8-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 437.570419][ T92] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.729685][ T30] audit: type=1400 audit(1758987551.110:863): avc: denied { accept } for pid=10998 comm="syz.5.1275" path="socket:[29421]" dev="sockfs" ino=29421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 437.899501][ T92] usb 8-1: config 0 descriptor?? [ 438.195983][ T92] hdpvr 8-1:0.0: firmware version 0x51 dated [ 438.205746][ T92] hdpvr 8-1:0.0: untested firmware, the driver might not work. [ 438.624132][ T30] audit: type=1400 audit(1758987551.940:864): avc: denied { getopt } for pid=11004 comm="syz.6.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 438.837188][ T92] hdpvr 8-1:0.0: Could not setup controls [ 438.855060][ T92] hdpvr 8-1:0.0: registering videodev failed [ 438.871127][ T92] hdpvr 8-1:0.0: probe with driver hdpvr failed with error -71 [ 438.888730][ T92] usb 8-1: USB disconnect, device number 6 [ 439.367570][T11015] overlay: ./file1 is not a directory [ 440.074388][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.268234][ T30] audit: type=1400 audit(1758987553.660:865): avc: denied { getopt } for pid=11024 comm="syz.5.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 441.565172][T11030] tmpfs: Bad value for 'mpol' [ 442.896719][ T30] audit: type=1400 audit(1758987556.290:866): avc: denied { getopt } for pid=11039 comm="syz.0.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 442.916200][ C0] vkms_vblank_simulate: vblank timer overrun [ 443.303721][ T10] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 443.437884][ T92] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 443.663696][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 443.671896][ T10] usb 1-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 443.687642][ T10] usb 1-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 443.780099][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 443.787179][ T10] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 443.797472][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.834833][ T10] usb 1-1: config 0 descriptor?? [ 443.851812][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 443.863538][ T92] usb 8-1: config 0 has no interfaces? [ 443.899603][ T92] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 444.003669][ T92] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.023605][ T92] usb 8-1: Product: syz [ 444.027919][ T92] usb 8-1: Manufacturer: syz [ 444.034079][ T92] usb 8-1: SerialNumber: syz [ 444.052663][ T92] usb 8-1: config 0 descriptor?? [ 444.131606][T11064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.256944][T11064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.732765][ T92] usb 8-1: USB disconnect, device number 7 [ 445.995727][T11088] nfs: Unknown parameter 'mºœ¶bz#hÁ5[W"' [ 446.521466][T11040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.597896][T11094] nfs: Unknown parameter 'mºœ¶bz#hÁ5[W"' [ 447.102855][T11040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.658191][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1304'. [ 447.769966][ T1206] usb 1-1: USB disconnect, device number 84 [ 448.002066][T11114] x_tables: ip6_tables: MASQUERADE target: only valid in nat table, not syz1 [ 448.943623][ T1206] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 448.980438][T11132] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1312'. [ 449.090842][ T30] audit: type=1400 audit(1758987562.486:867): avc: denied { setopt } for pid=11126 comm="syz.7.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 449.203701][ T1206] usb 1-1: Using ep0 maxpacket: 16 [ 449.210886][ T1206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.222297][ T1206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.233300][ T1206] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 449.246917][ T1206] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 449.256370][ T1206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.331490][ T1206] usb 1-1: config 0 descriptor?? [ 449.420042][T11137] nfs: Unknown parameter 'mºœ¶bz#hÁ5[W"' [ 451.349321][ T1206] usbhid 1-1:0.0: can't add hid device: -71 [ 451.371206][ T1206] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 451.400441][ T1206] usb 1-1: USB disconnect, device number 85 [ 453.712973][T11183] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1326'. [ 453.755744][T11186] FAULT_INJECTION: forcing a failure. [ 453.755744][T11186] name failslab, interval 1, probability 0, space 0, times 0 [ 453.797880][T11186] CPU: 1 UID: 0 PID: 11186 Comm: syz.7.1327 Not tainted syzkaller #0 PREEMPT(full) [ 453.797908][T11186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 453.797918][T11186] Call Trace: [ 453.797924][T11186] [ 453.797930][T11186] dump_stack_lvl+0x16c/0x1f0 [ 453.797960][T11186] should_fail_ex+0x512/0x640 [ 453.797987][T11186] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 453.798008][T11186] should_failslab+0xc2/0x120 [ 453.798026][T11186] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 453.798049][T11186] ? __alloc_skb+0x2b2/0x380 [ 453.798068][T11186] __alloc_skb+0x2b2/0x380 [ 453.798084][T11186] ? __pfx___alloc_skb+0x10/0x10 [ 453.798103][T11186] ? genl_rcv_msg+0x4bb/0x800 [ 453.798131][T11186] netlink_ack+0x15d/0xb80 [ 453.798161][T11186] netlink_rcv_skb+0x332/0x420 [ 453.798181][T11186] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.798207][T11186] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 453.798240][T11186] ? netlink_deliver_tap+0x1ae/0xd30 [ 453.798262][T11186] genl_rcv+0x28/0x40 [ 453.798282][T11186] netlink_unicast+0x5aa/0x870 [ 453.798306][T11186] ? __pfx_netlink_unicast+0x10/0x10 [ 453.798326][T11186] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 453.798354][T11186] netlink_sendmsg+0x8d1/0xdd0 [ 453.798388][T11186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.798420][T11186] ____sys_sendmsg+0xa98/0xc70 [ 453.798449][T11186] ? copy_msghdr_from_user+0x10a/0x160 [ 453.798469][T11186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.798506][T11186] ___sys_sendmsg+0x134/0x1d0 [ 453.798529][T11186] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.798580][T11186] __sys_sendmsg+0x16d/0x220 [ 453.798602][T11186] ? __pfx___sys_sendmsg+0x10/0x10 [ 453.798637][T11186] do_syscall_64+0xcd/0x4e0 [ 453.798661][T11186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.798678][T11186] RIP: 0033:0x7f47cbd8eec9 [ 453.798694][T11186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.798710][T11186] RSP: 002b:00007f47c9ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.798729][T11186] RAX: ffffffffffffffda RBX: 00007f47cbfe5fa0 RCX: 00007f47cbd8eec9 [ 453.798740][T11186] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 453.798750][T11186] RBP: 00007f47c9ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 453.798759][T11186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 453.798769][T11186] R13: 00007f47cbfe6038 R14: 00007f47cbfe5fa0 R15: 00007ffc8fabed08 [ 453.798792][T11186] [ 454.048067][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.081008][T11189] binder: BINDER_SET_CONTEXT_MGR already set [ 454.265095][T11189] binder: 11188:11189 ioctl 4018620d 200000004a80 returned -16 [ 454.265124][T11190] binder: 11188:11190 ioctl c0306201 2000000004c0 returned -22 [ 454.699064][T11201] kvm: pic: non byte read [ 454.711194][T11201] kvm: pic: non byte read [ 454.732255][T11201] kvm: pic: non byte read [ 454.755608][T11209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1335'. [ 454.756720][T11201] kvm: pic: non byte read [ 454.846330][T11201] kvm: pic: non byte read [ 454.867752][T11201] kvm: pic: non byte read [ 454.872262][T11201] kvm: pic: non byte read [ 454.903365][T11201] kvm: pic: non byte read [ 454.913121][T11216] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1336'. [ 454.922500][T11201] kvm: pic: non byte read [ 454.963253][T11201] kvm: pic: non byte read [ 455.027443][ T30] audit: type=1400 audit(1758987568.426:868): avc: denied { create } for pid=11185 comm="syz.0.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 455.126169][ T30] audit: type=1400 audit(1758987568.426:869): avc: denied { getopt } for pid=11185 comm="syz.0.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 455.375114][T11221] vcan0: tx drop: invalid da for name 0x00000000fffffffd [ 455.464870][T11226] x_tables: ip6_tables: MASQUERADE target: only valid in nat table, not syz1 [ 455.733730][ T5994] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 455.863755][T11235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1344'. [ 455.874446][T11235] tmpfs: Bad value for 'mpol' [ 455.880099][T11235] nfs: Unknown parameter 'tmpfs' [ 455.957596][ T5994] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 455.973279][ T5994] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 455.996701][ T5994] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 456.017842][ T5994] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 456.048143][ T5994] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 456.086500][ T5994] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 456.098095][ T5994] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 456.119541][ T5994] usb 7-1: Product: syz [ 456.129323][ T5994] usb 7-1: Manufacturer: syz [ 456.151953][ T5994] cdc_wdm 7-1:1.0: skipping garbage [ 456.169147][ T5994] cdc_wdm 7-1:1.0: skipping garbage [ 456.184650][ T5994] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 456.197909][ T5994] cdc_wdm 7-1:1.0: Unknown control protocol [ 456.727039][T11244] FAULT_INJECTION: forcing a failure. [ 456.727039][T11244] name failslab, interval 1, probability 0, space 0, times 0 [ 456.759885][T11244] CPU: 1 UID: 0 PID: 11244 Comm: syz.5.1348 Not tainted syzkaller #0 PREEMPT(full) [ 456.759910][T11244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 456.759919][T11244] Call Trace: [ 456.759925][T11244] [ 456.759933][T11244] dump_stack_lvl+0x16c/0x1f0 [ 456.759957][T11244] should_fail_ex+0x512/0x640 [ 456.759971][T11244] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 456.759988][T11244] should_failslab+0xc2/0x120 [ 456.760002][T11244] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 456.760015][T11244] ? kstrdup_const+0x63/0x80 [ 456.760029][T11244] kstrdup+0x53/0x100 [ 456.760041][T11244] kstrdup_const+0x63/0x80 [ 456.760052][T11244] __kernfs_new_node+0x9b/0x8e0 [ 456.760070][T11244] ? __pfx___kernfs_new_node+0x10/0x10 [ 456.760087][T11244] ? find_held_lock+0x2b/0x80 [ 456.760102][T11244] ? kernfs_root+0xee/0x2a0 [ 456.760119][T11244] kernfs_new_node+0x13c/0x1e0 [ 456.760140][T11244] kernfs_create_link+0xcc/0x240 [ 456.760153][T11244] sysfs_do_create_link_sd+0x90/0x140 [ 456.760168][T11244] sysfs_create_link+0x61/0xc0 [ 456.760182][T11244] device_add+0x62c/0x1aa0 [ 456.760200][T11244] ? __pfx_device_add+0x10/0x10 [ 456.760215][T11244] ? lockdep_init_map_type+0x5c/0x280 [ 456.760231][T11244] ? __init_waitqueue_head+0xca/0x150 [ 456.760248][T11244] netdev_register_kobject+0x1a9/0x3d0 [ 456.760268][T11244] register_netdevice+0x13dc/0x2270 [ 456.760287][T11244] ? __pfx_register_netdevice+0x10/0x10 [ 456.760302][T11244] ? dev_addr_mod+0x316/0x540 [ 456.760315][T11244] ip6gre_newlink_common.constprop.0+0x14e/0x340 [ 456.760329][T11244] ? __pfx_ip6gre_newlink_common.constprop.0+0x10/0x10 [ 456.760342][T11244] ? lockdep_rtnl_is_held+0x26/0x40 [ 456.760351][T11244] ? ip6gre_tunnel_find+0x36c/0x430 [ 456.760364][T11244] ip6gre_newlink+0x17d/0x400 [ 456.760379][T11244] ? __pfx_ip6gre_newlink+0x10/0x10 [ 456.760397][T11244] rtnl_newlink+0xc45/0x2000 [ 456.760423][T11244] ? __pfx_rtnl_newlink+0x10/0x10 [ 456.760441][T11244] ? find_held_lock+0x2b/0x80 [ 456.760460][T11244] ? avc_has_perm_noaudit+0x117/0x3b0 [ 456.760481][T11244] ? avc_has_perm_noaudit+0x149/0x3b0 [ 456.760517][T11244] ? find_held_lock+0x2b/0x80 [ 456.760530][T11244] ? __pfx_rtnl_newlink+0x10/0x10 [ 456.760543][T11244] ? __pfx_rtnl_newlink+0x10/0x10 [ 456.760556][T11244] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 456.760570][T11244] ? __pfx_rtnl_newlink+0x10/0x10 [ 456.760584][T11244] rtnetlink_rcv_msg+0x95e/0xe90 [ 456.760600][T11244] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 456.760618][T11244] ? ref_tracker_free+0x37c/0x830 [ 456.760635][T11244] netlink_rcv_skb+0x155/0x420 [ 456.760651][T11244] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 456.760666][T11244] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 456.760685][T11244] ? netlink_deliver_tap+0x1ae/0xd30 [ 456.760701][T11244] netlink_unicast+0x5aa/0x870 [ 456.760717][T11244] ? __pfx_netlink_unicast+0x10/0x10 [ 456.760731][T11244] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 456.760749][T11244] netlink_sendmsg+0x8d1/0xdd0 [ 456.760766][T11244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.760785][T11244] ____sys_sendmsg+0xa98/0xc70 [ 456.760803][T11244] ? copy_msghdr_from_user+0x10a/0x160 [ 456.760816][T11244] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.760838][T11244] ___sys_sendmsg+0x134/0x1d0 [ 456.760852][T11244] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.760883][T11244] __sys_sendmsg+0x16d/0x220 [ 456.760896][T11244] ? __pfx___sys_sendmsg+0x10/0x10 [ 456.760918][T11244] do_syscall_64+0xcd/0x4e0 [ 456.760934][T11244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.760946][T11244] RIP: 0033:0x7f34a738eec9 [ 456.760956][T11244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.760967][T11244] RSP: 002b:00007f34a81e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.760979][T11244] RAX: ffffffffffffffda RBX: 00007f34a75e5fa0 RCX: 00007f34a738eec9 [ 456.760986][T11244] RDX: 0000000020040040 RSI: 0000200000000000 RDI: 0000000000000003 [ 456.760993][T11244] RBP: 00007f34a81e0090 R08: 0000000000000000 R09: 0000000000000000 [ 456.760999][T11244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 456.761005][T11244] R13: 00007f34a75e6038 R14: 00007f34a75e5fa0 R15: 00007fff4f985af8 [ 456.761018][T11244] [ 456.790429][T11246] tipc: Enabled bearer , priority 0 [ 456.793895][ C1] vkms_vblank_simulate: vblank timer overrun [ 457.288745][T11247] syzkaller0: entered promiscuous mode [ 457.548706][T11247] syzkaller0: entered allmulticast mode [ 457.563010][T11246] tipc: Resetting bearer [ 457.589743][T11245] tipc: Resetting bearer [ 457.644380][T11245] tipc: Disabling bearer [ 457.924857][ T5994] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 457.929227][T11274] delete_channel: no stack [ 458.252645][ T5994] usb 6-1: Using ep0 maxpacket: 32 [ 458.263734][ T30] audit: type=1400 audit(1758987571.486:870): avc: denied { firmware_load } for pid=11272 comm="syz.0.1356" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 458.292446][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.313922][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.338880][ T5994] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 458.352150][ T5994] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.363154][ T5994] usb 6-1: config 0 descriptor?? [ 458.524607][ T92] usb 7-1: USB disconnect, device number 35 [ 458.623681][ T24] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 458.703199][T11288] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 458.714248][T11288] overlayfs: failed to set xattr on upper [ 458.722634][T11288] overlayfs: ...falling back to redirect_dir=nofollow. [ 458.732891][T11288] overlayfs: ...falling back to index=off. [ 458.746336][ T5994] hid_parser_main: 15 callbacks suppressed [ 458.746361][ T5994] koneplus 0003:1E7D:2D51.0033: unknown main item tag 0x0 [ 458.762257][ T5994] koneplus 0003:1E7D:2D51.0033: unknown main item tag 0x0 [ 458.772962][T11288] overlayfs: ...falling back to uuid=null. [ 458.779164][ T5994] koneplus 0003:1E7D:2D51.0033: unknown main item tag 0x0 [ 458.786999][ T5994] koneplus 0003:1E7D:2D51.0033: unknown main item tag 0x0 [ 458.795216][ T5994] koneplus 0003:1E7D:2D51.0033: unknown main item tag 0x0 [ 458.801570][T11290] fuse: Bad value for 'fd' [ 458.805750][ T5994] koneplus 0003:1E7D:2D51.0033: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 458.821725][ T24] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 458.860156][ T24] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 458.861881][T11288] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 458.870251][ T24] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 458.896528][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.921567][T11276] raw-gadget.4 gadget.7: fail, usb_ep_enable returned -22 [ 458.967178][ T24] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 459.123762][ T92] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 459.283776][ T92] usb 7-1: Using ep0 maxpacket: 32 [ 459.300771][ T92] usb 7-1: config 4 has an invalid interface number: 128 but max is 0 [ 459.311216][ T92] usb 7-1: config 4 has no interface number 0 [ 459.320091][T11292] syzkaller1: entered promiscuous mode [ 459.329565][ T92] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.346245][T11292] syzkaller1: entered allmulticast mode [ 459.387814][ T92] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.421935][ T92] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 459.431147][ T92] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.451551][ T92] hub 7-1:4.128: USB hub found [ 459.604114][T11300] syzkaller1: entered promiscuous mode [ 459.609772][T11300] syzkaller1: entered allmulticast mode [ 459.652045][ T92] hub 7-1:4.128: 6 ports detected [ 459.658605][ T92] hub 7-1:4.128: Using single TT (err -22) [ 459.665417][ T92] hub 7-1:4.128: insufficient power available to use all downstream ports [ 459.727478][T11302] x_tables: ip6_tables: MASQUERADE target: only valid in nat table, not syz1 [ 459.793971][ T5960] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 459.859768][ T92] hub 7-1:4.128: hub_hub_status failed (err = -71) [ 459.867810][ T92] hub 7-1:4.128: config failed, can't get hub status (err -71) [ 459.907448][ T92] usb 7-1: USB disconnect, device number 36 [ 459.953815][ T5960] usb 1-1: device descriptor read/64, error -71 [ 460.193671][ T5960] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 460.229566][T11305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.238707][T11305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.333748][ T5960] usb 1-1: device descriptor read/64, error -71 [ 460.444622][ T5960] usb usb1-port1: attempt power cycle [ 460.676544][ T5994] koneplus 0003:1E7D:2D51.0033: couldn't init struct koneplus_device [ 460.715288][ T5994] koneplus 0003:1E7D:2D51.0033: couldn't install mouse [ 460.737946][ T5994] koneplus 0003:1E7D:2D51.0033: probe with driver koneplus failed with error -71 [ 460.759866][ T5994] usb 6-1: USB disconnect, device number 47 [ 460.885298][ T5960] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 460.935474][ T24] usb 8-1: USB disconnect, device number 8 [ 460.941459][ T5960] usb 1-1: device descriptor read/8, error -71 [ 461.362015][T11316] netlink: 'syz.4.1369': attribute type 4 has an invalid length. [ 461.371616][T11316] netlink: 'syz.4.1369': attribute type 3 has an invalid length. [ 461.382030][T11316] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1369'. [ 461.403971][T11316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.418504][T11316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.593642][ T5960] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 461.640882][ T5960] usb 1-1: device descriptor read/8, error -71 [ 461.764472][ T5960] usb usb1-port1: unable to enumerate USB device [ 461.862471][ T30] audit: type=1400 audit(1758987575.236:871): avc: denied { ioctl } for pid=11319 comm="syz.5.1372" path="socket:[30451]" dev="sockfs" ino=30451 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 461.898514][ T24] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 462.109047][ T24] usb 8-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 462.119126][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.138373][ T24] pwc: Logitech ViewPort AV 100 webcam detected. [ 462.400428][ T24] pwc: Failed to set LED on/off time (-71) [ 462.407635][ T24] pwc: send_video_command error -71 [ 462.412867][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 462.447352][ T24] Philips webcam 8-1:127.0: probe with driver Philips webcam failed with error -71 [ 462.543963][ T24] usb 8-1: USB disconnect, device number 9 [ 462.662079][T11328] syzkaller1: entered promiscuous mode [ 462.670772][T11328] syzkaller1: entered allmulticast mode [ 462.921455][T11337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.938194][T11337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.183029][T11345] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 463.190305][T11345] overlayfs: failed to set xattr on upper [ 463.196264][T11345] overlayfs: ...falling back to redirect_dir=nofollow. [ 463.203119][T11345] overlayfs: ...falling back to index=off. [ 463.208970][T11345] overlayfs: ...falling back to uuid=null. [ 463.240459][T11345] fuse: Bad value for 'fd' [ 463.247079][T11345] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 463.283598][ T5909] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 463.339041][T11344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 463.455683][ T5909] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 463.467187][ T5909] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 463.491167][ T5909] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 463.510783][ T5909] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 463.532328][ T5909] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 463.569151][ T5909] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 463.583862][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 463.602269][ T5909] usb 6-1: Product: syz [ 463.622418][ T5909] usb 6-1: Manufacturer: syz [ 463.640039][ T5909] cdc_wdm 6-1:1.0: skipping garbage [ 463.656171][ T5909] cdc_wdm 6-1:1.0: skipping garbage [ 463.675613][ T5909] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 463.763909][ T5909] cdc_wdm 6-1:1.0: Unknown control protocol [ 464.959152][T11362] tmpfs: Bad value for 'mpol' [ 465.070673][ T5909] usb 6-1: USB disconnect, device number 48 [ 465.407060][T11372] vlan2: entered allmulticast mode [ 465.412404][T11372] bridge0: entered allmulticast mode [ 466.440139][T11387] nfs: Unknown parameter 'mºœ¶bz#hÁ5[W"' [ 467.300388][T11395] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 467.943345][T11401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.952465][T11401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.733804][T11422] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 468.740835][T11422] overlayfs: failed to set xattr on upper [ 468.746656][T11422] overlayfs: ...falling back to redirect_dir=nofollow. [ 468.754242][T11422] overlayfs: ...falling back to index=off. [ 468.760067][T11422] overlayfs: ...falling back to uuid=null. [ 468.788609][T11423] fuse: Bad value for 'fd' [ 468.795350][T11423] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 468.853227][T11424] ptrace attach of "./syz-executor exec"[10201] was attempted by "./syz-executor exec"[11424] [ 468.903633][ T30] audit: type=1400 audit(1758987582.286:872): avc: denied { shutdown } for pid=11414 comm="syz.7.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 468.923257][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.391288][T11432] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 469.430878][T11433] ALSA: mixer_oss: invalid OSS volume '' [ 470.775686][ T5947] Process accounting resumed [ 470.857047][ T24] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 470.880857][T11444] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1407'. [ 471.018385][ T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 471.037443][ T24] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 471.157178][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 471.192319][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 471.283034][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 471.318962][ T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 471.332192][ T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 471.360759][ T24] usb 1-1: Product: syz [ 471.363779][ T5994] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 471.365025][ T24] usb 1-1: Manufacturer: syz [ 471.496102][T11456] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 471.503142][T11456] overlayfs: failed to set xattr on upper [ 471.509037][T11456] overlayfs: ...falling back to redirect_dir=nofollow. [ 471.516029][T11456] overlayfs: ...falling back to index=off. [ 471.522644][T11456] overlayfs: ...falling back to uuid=null. [ 471.552694][T11457] fuse: Bad value for 'fd' [ 471.559428][T11457] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 471.614043][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 471.619389][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 471.635626][ T24] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 471.647944][ T24] cdc_wdm 1-1:1.0: Unknown control protocol [ 471.893857][ T92] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 472.105666][ T92] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 472.130124][ T92] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 472.207654][ T92] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 472.244447][ T92] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 472.273628][ T92] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 472.398372][ T92] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 472.532625][ T92] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 472.561847][T11467] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.1414'. [ 472.585181][ T92] usb 8-1: Product: syz [ 472.619831][ T92] usb 8-1: Manufacturer: syz [ 472.714140][ T92] cdc_wdm 8-1:1.0: skipping garbage [ 472.787646][ T92] cdc_wdm 8-1:1.0: skipping garbage [ 472.936434][ T92] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 472.959607][ T92] cdc_wdm 8-1:1.0: Unknown control protocol [ 473.550854][ T92] usb 1-1: USB disconnect, device number 90 [ 473.592149][T11477] FAULT_INJECTION: forcing a failure. [ 473.592149][T11477] name failslab, interval 1, probability 0, space 0, times 0 [ 473.612296][T11477] CPU: 1 UID: 0 PID: 11477 Comm: syz.0.1416 Not tainted syzkaller #0 PREEMPT(full) [ 473.612325][T11477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 473.612335][T11477] Call Trace: [ 473.612341][T11477] [ 473.612349][T11477] dump_stack_lvl+0x16c/0x1f0 [ 473.612376][T11477] should_fail_ex+0x512/0x640 [ 473.612392][T11477] ? __kmalloc_noprof+0xbf/0x510 [ 473.612406][T11477] ? __sta_info_alloc+0xa3/0x1fb0 [ 473.612416][T11477] should_failslab+0xc2/0x120 [ 473.612430][T11477] __kmalloc_noprof+0xd2/0x510 [ 473.612441][T11477] ? __rtnl_unlock+0x68/0xf0 [ 473.612464][T11477] ? __rtnl_unlock+0x68/0xf0 [ 473.612490][T11477] __sta_info_alloc+0xa3/0x1fb0 [ 473.612512][T11477] ieee80211_add_station+0x57d/0x6c0 [ 473.612535][T11477] nl80211_new_station+0x14ff/0x1c90 [ 473.612558][T11477] ? __pfx_nl80211_new_station+0x10/0x10 [ 473.612584][T11477] ? nl80211_pre_doit+0x1b0/0xb10 [ 473.612604][T11477] genl_family_rcv_msg_doit+0x209/0x2f0 [ 473.612632][T11477] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 473.612663][T11477] ? bpf_lsm_capable+0x9/0x10 [ 473.612682][T11477] ? security_capable+0x7e/0x260 [ 473.612697][T11477] ? ns_capable+0xd7/0x110 [ 473.612711][T11477] genl_rcv_msg+0x55c/0x800 [ 473.612729][T11477] ? __pfx_genl_rcv_msg+0x10/0x10 [ 473.612754][T11477] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 473.612770][T11477] ? __pfx_nl80211_new_station+0x10/0x10 [ 473.612790][T11477] ? __pfx_nl80211_post_doit+0x10/0x10 [ 473.612820][T11477] netlink_rcv_skb+0x155/0x420 [ 473.612835][T11477] ? __pfx_genl_rcv_msg+0x10/0x10 [ 473.612856][T11477] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 473.612876][T11477] ? netlink_deliver_tap+0x1ae/0xd30 [ 473.612899][T11477] genl_rcv+0x28/0x40 [ 473.612920][T11477] netlink_unicast+0x5aa/0x870 [ 473.612944][T11477] ? __pfx_netlink_unicast+0x10/0x10 [ 473.612963][T11477] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 473.612982][T11477] netlink_sendmsg+0x8d1/0xdd0 [ 473.612998][T11477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.613017][T11477] ____sys_sendmsg+0xa98/0xc70 [ 473.613043][T11477] ? copy_msghdr_from_user+0x10a/0x160 [ 473.613063][T11477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 473.613098][T11477] ___sys_sendmsg+0x134/0x1d0 [ 473.613114][T11477] ? __pfx____sys_sendmsg+0x10/0x10 [ 473.613145][T11477] __sys_sendmsg+0x16d/0x220 [ 473.613158][T11477] ? __pfx___sys_sendmsg+0x10/0x10 [ 473.613190][T11477] do_syscall_64+0xcd/0x4e0 [ 473.613214][T11477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.613231][T11477] RIP: 0033:0x7f859818eec9 [ 473.613245][T11477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.613257][T11477] RSP: 002b:00007f859909b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.613268][T11477] RAX: ffffffffffffffda RBX: 00007f85983e5fa0 RCX: 00007f859818eec9 [ 473.613275][T11477] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 473.613281][T11477] RBP: 00007f859909b090 R08: 0000000000000000 R09: 0000000000000000 [ 473.613287][T11477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.613294][T11477] R13: 00007f85983e6038 R14: 00007f85983e5fa0 R15: 00007ffdf1d69208 [ 473.613315][T11477] [ 473.924803][ C1] vkms_vblank_simulate: vblank timer overrun [ 474.016670][ T5994] usb 6-1: unable to get BOS descriptor or descriptor too short [ 474.043861][ T5994] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 474.060721][ T5994] usb 6-1: can't read configurations, error -71 [ 474.146225][T11481] usb 8-1: USB disconnect, device number 10 [ 474.416318][T11492] input: syz0 as /devices/virtual/input/input49 [ 474.551518][T11492] ./file0: Can't lookup blockdev [ 475.507209][T11498] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 475.844643][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1424'. [ 475.889096][T11503] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 475.998339][T11503] macvlan2: entered allmulticast mode [ 476.163874][T11503] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 476.475529][T11509] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1427'. [ 476.485496][T11509] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1427'. [ 476.589101][T11511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.633990][T11511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.648462][T11515] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1429'. [ 476.788265][T11521] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 476.795549][T11521] overlayfs: failed to set xattr on upper [ 476.801479][T11521] overlayfs: ...falling back to redirect_dir=nofollow. [ 476.809909][T11520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.853635][T11521] overlayfs: ...falling back to index=off. [ 476.854261][T11524] fuse: Bad value for 'fd' [ 476.887303][T11524] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 476.911041][T11521] overlayfs: ...falling back to uuid=null. [ 476.995533][T11514] usb usb8: usbfs: process 11514 (syz.5.1428) did not claim interface 0 before use [ 477.077828][ T30] audit: type=1400 audit(1758987590.356:873): avc: denied { setopt } for pid=11525 comm="syz.7.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 477.097763][ T92] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 477.266228][ T92] usb 1-1: Using ep0 maxpacket: 16 [ 477.619098][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.640456][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.666682][ T92] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 477.697682][ T92] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 477.749926][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.745638][ T92] usb 1-1: config 0 descriptor?? [ 478.752275][T11550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.797427][T11550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.122664][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1440'. [ 479.144776][T11552] tmpfs: Bad value for 'mpol' [ 479.189360][T11559] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1438'. [ 479.292532][ T92] HID 045e:07da: Invalid code 65791 type 1 [ 479.294848][T11560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.439887][T11560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.499730][ T92] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0034/input/input50 [ 479.540069][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1440'. [ 479.566293][ T92] microsoft 0003:045E:07DA.0034: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 479.596956][ T92] usb 1-1: USB disconnect, device number 91 [ 479.753847][ T24] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 480.053637][ T24] usb 6-1: device descriptor read/64, error -71 [ 480.423999][ T5947] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 480.876428][ T24] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 481.033584][ T24] usb 6-1: device descriptor read/64, error -71 [ 481.094846][ T5947] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 481.104014][ T5947] usb 7-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 481.211837][ T24] usb usb6-port1: attempt power cycle [ 481.234670][ T5947] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 481.243910][ T5947] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 481.255800][ T5947] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 481.327415][T11599] nfs: Unknown parameter 'mºœ¶bz#hÁ5[W"' [ 481.671498][ T5947] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 481.681642][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 481.691271][ T5947] usb 7-1: Product: syz [ 481.695766][ T5947] usb 7-1: Manufacturer: syz [ 481.725912][ T5947] cdc_wdm 7-1:1.0: skipping garbage [ 481.732984][ T5947] cdc_wdm 7-1:1.0: skipping garbage [ 481.738410][ T5947] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 481.934207][ T24] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 482.048395][ T24] usb 6-1: device descriptor read/8, error -71 [ 482.294365][ T24] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 482.312537][ T10] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 482.338278][ T24] usb 6-1: device descriptor read/8, error -71 [ 482.480075][ T24] usb usb6-port1: unable to enumerate USB device [ 482.655176][ T10] usb 1-1: config 160 has an invalid interface number: 200 but max is 0 [ 482.797767][ T10] usb 1-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 483.221681][T11620] netlink: 'syz.7.1459': attribute type 2 has an invalid length. [ 483.229501][T11620] netlink: 137592 bytes leftover after parsing attributes in process `syz.7.1459'. [ 483.302699][ T10] usb 1-1: config 160 has no interface number 0 [ 483.319127][ T10] usb 1-1: config 160 interface 200 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 483.336387][T11625] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1460'. [ 483.516127][ T92] usb 7-1: USB disconnect, device number 37 [ 483.533907][ T10] usb 1-1: config 160 interface 200 has no altsetting 0 [ 483.633653][ T10] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 483.683533][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.691565][ T10] usb 1-1: Product: syz [ 484.004595][ T10] usb 1-1: Manufacturer: syz [ 484.009235][ T10] usb 1-1: SerialNumber: syz [ 484.332757][ T5994] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 484.421342][ T5994] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 484.484500][ T5994] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 484.491995][ T5994] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 484.505118][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.512984][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.644233][ T5994] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 484.654904][T11638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.709075][ T5994] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 484.753819][T11638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.794013][ T5994] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 484.801462][ T5994] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 484.824991][T11608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.873935][ T5994] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 484.881405][ T5994] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 484.889371][T11608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.927537][ T5994] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.43 Device [syz1] on syz1 [ 484.953012][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 485.095903][ T10] usb 1-1: MIDIStreaming interface descriptor not found [ 485.170739][T11644] nfs: Unknown parameter 'mºœ¶bz#hÁ5[W"' [ 485.572940][ T10] usb 1-1: USB disconnect, device number 92 [ 485.584639][ T92] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 485.674371][T11649] syzkaller1: entered promiscuous mode [ 485.690077][T11649] syzkaller1: entered allmulticast mode [ 485.709317][T11649] FAULT_INJECTION: forcing a failure. [ 485.709317][T11649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.774428][ T92] usb 6-1: Using ep0 maxpacket: 16 [ 485.780591][T11649] CPU: 0 UID: 0 PID: 11649 Comm: syz.0.1468 Not tainted syzkaller #0 PREEMPT(full) [ 485.780617][T11649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 485.780627][T11649] Call Trace: [ 485.780633][T11649] [ 485.780640][T11649] dump_stack_lvl+0x16c/0x1f0 [ 485.780669][T11649] should_fail_ex+0x512/0x640 [ 485.780699][T11649] _copy_from_iter+0x29f/0x1720 [ 485.780727][T11649] ? __pfx__copy_from_iter+0x10/0x10 [ 485.780749][T11649] ? _copy_from_iter+0x15d/0x1720 [ 485.780780][T11649] skb_copy_datagram_from_iter+0x124/0x740 [ 485.780804][T11649] ? iov_iter_advance+0x7d/0x6c0 [ 485.780828][T11649] tun_get_user+0x1859/0x3cd0 [ 485.780866][T11649] ? __pfx_tun_get_user+0x10/0x10 [ 485.780892][T11649] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 485.780921][T11649] ? find_held_lock+0x2b/0x80 [ 485.780941][T11649] ? tun_get+0x191/0x370 [ 485.780966][T11649] tun_chr_write_iter+0xdc/0x210 [ 485.780991][T11649] vfs_write+0x7d0/0x11d0 [ 485.781010][T11649] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 485.781043][T11649] ? __pfx_vfs_write+0x10/0x10 [ 485.781057][T11649] ? find_held_lock+0x2b/0x80 [ 485.781091][T11649] ksys_write+0x12a/0x250 [ 485.781108][T11649] ? __pfx_ksys_write+0x10/0x10 [ 485.781130][T11649] do_syscall_64+0xcd/0x4e0 [ 485.781147][T11649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.781159][T11649] RIP: 0033:0x7f859818eec9 [ 485.781168][T11649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.781179][T11649] RSP: 002b:00007f859909b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 485.781190][T11649] RAX: ffffffffffffffda RBX: 00007f85983e5fa0 RCX: 00007f859818eec9 [ 485.781197][T11649] RDX: 00000000000000c2 RSI: 0000200000000080 RDI: 0000000000000003 [ 485.781203][T11649] RBP: 00007f859909b090 R08: 0000000000000000 R09: 0000000000000000 [ 485.781210][T11649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.781216][T11649] R13: 00007f85983e6038 R14: 00007f85983e5fa0 R15: 00007ffdf1d69208 [ 485.781229][T11649] [ 485.781895][ T92] usb 6-1: config 0 has an invalid interface number: 236 but max is 1 [ 486.012882][ T92] usb 6-1: config 0 has an invalid interface number: 129 but max is 1 [ 486.022109][ T92] usb 6-1: config 0 has no interface number 0 [ 486.028359][ T92] usb 6-1: config 0 has no interface number 1 [ 486.036003][ T92] usb 6-1: config 0 interface 236 has no altsetting 0 [ 486.045097][ T92] usb 6-1: config 0 interface 129 has no altsetting 0 [ 486.064150][ T92] usb 6-1: New USB device found, idVendor=1ace, idProduct=e9b2, bcdDevice=5c.3d [ 486.081134][ T92] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.100407][ T92] usb 6-1: Product: syz [ 486.144761][ T92] usb 6-1: Manufacturer: syz [ 486.170472][ T92] usb 6-1: SerialNumber: syz [ 486.187964][T11657] hfsplus: unable to find HFS+ superblock [ 486.221795][ T92] usb 6-1: config 0 descriptor?? [ 486.393720][ T1206] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 487.161472][ T12] wlan1: Trigger new scan to find an IBSS to join [ 487.324324][ T10] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 487.484584][ T30] audit: type=1400 audit(1758987600.756:874): avc: denied { connect } for pid=11658 comm="syz.4.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 487.933328][T11673] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 488.390349][ T30] audit: type=1400 audit(1758987601.416:875): avc: denied { create } for pid=11641 comm="syz.5.1466" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 488.413194][ T30] audit: type=1400 audit(1758987601.426:876): avc: denied { create } for pid=11641 comm="syz.5.1466" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 488.479781][ T30] audit: type=1400 audit(1758987601.436:877): avc: denied { create } for pid=11641 comm="syz.5.1466" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 489.392497][ T1206] usb 7-1: unable to get BOS descriptor or descriptor too short [ 489.417421][ T1206] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 489.482336][ T92] ir_usb 6-1:0.236: required endpoints missing [ 489.493970][ T92] usb 6-1: selecting invalid altsetting 0 [ 489.508416][ T92] usb 6-1: selecting invalid altsetting 0 [ 489.518100][T11680] netlink: 'syz.0.1474': attribute type 11 has an invalid length. [ 489.527023][ T92] usb 6-1: Found UVC 2.26 device syz (1ace:e9b2) [ 489.532637][ T1206] usb 7-1: can't read configurations, error -71 [ 489.543426][ T92] usb 6-1: No valid video chain found. [ 489.563083][ T30] audit: type=1400 audit(1758987602.946:878): avc: denied { unmount } for pid=6182 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 489.572023][ T92] usb 6-1: USB disconnect, device number 55 [ 489.593231][T11681] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 489.600468][T11681] overlayfs: failed to set xattr on upper [ 489.606302][T11681] overlayfs: ...falling back to redirect_dir=nofollow. [ 489.613308][T11681] overlayfs: ...falling back to index=off. [ 489.624936][T11681] overlayfs: ...falling back to uuid=null. [ 489.649952][T11684] fuse: Bad value for 'fd' [ 489.678682][T11688] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1475'. [ 489.696425][T11681] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 489.803119][T11685] syzkaller1: entered promiscuous mode [ 489.813649][T11685] syzkaller1: entered allmulticast mode [ 489.822195][T11691] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1478'. [ 489.834376][T11694] FAULT_INJECTION: forcing a failure. [ 489.834376][T11694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.860803][T11694] CPU: 0 UID: 0 PID: 11694 Comm: syz.5.1479 Not tainted syzkaller #0 PREEMPT(full) [ 489.860834][T11694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 489.860846][T11694] Call Trace: [ 489.860853][T11694] [ 489.860861][T11694] dump_stack_lvl+0x16c/0x1f0 [ 489.860894][T11694] should_fail_ex+0x512/0x640 [ 489.860920][T11694] _copy_from_user+0x2e/0xd0 [ 489.860947][T11694] input_event_from_user+0x133/0x3b0 [ 489.860967][T11694] ? __pfx_input_event_from_user+0x10/0x10 [ 489.860984][T11694] ? __pfx___might_resched+0x10/0x10 [ 489.861008][T11694] ? input_inject_event+0x1c0/0x3b0 [ 489.861028][T11694] evdev_write+0x37b/0x750 [ 489.861049][T11694] ? __pfx_evdev_write+0x10/0x10 [ 489.861068][T11694] ? bpf_lsm_file_permission+0x9/0x10 [ 489.861091][T11694] ? security_file_permission+0x71/0x210 [ 489.861119][T11694] ? rw_verify_area+0xcf/0x6c0 [ 489.861148][T11694] ? __pfx_evdev_write+0x10/0x10 [ 489.861164][T11694] vfs_write+0x2a0/0x11d0 [ 489.861188][T11694] ? __pfx_vfs_write+0x10/0x10 [ 489.861204][T11694] ? find_held_lock+0x2b/0x80 [ 489.861227][T11694] ? __fget_files+0x204/0x3c0 [ 489.861251][T11694] ? __fget_files+0x20e/0x3c0 [ 489.861277][T11694] ksys_write+0x1f8/0x250 [ 489.861295][T11694] ? __pfx_ksys_write+0x10/0x10 [ 489.861312][T11694] ? syscall_user_dispatch+0x78/0x140 [ 489.861341][T11694] do_syscall_64+0xcd/0x4e0 [ 489.861366][T11694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.861386][T11694] RIP: 0033:0x7f34a738eec9 [ 489.861403][T11694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.861420][T11694] RSP: 002b:00007f34a81e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 489.861438][T11694] RAX: ffffffffffffffda RBX: 00007f34a75e5fa0 RCX: 00007f34a738eec9 [ 489.861449][T11694] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000006 [ 489.861460][T11694] RBP: 00007f34a81e0090 R08: 0000000000000000 R09: 0000000000000000 [ 489.861471][T11694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 489.861481][T11694] R13: 00007f34a75e6038 R14: 00007f34a75e5fa0 R15: 00007fff4f985af8 [ 489.861506][T11694] [ 490.373196][T11703] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1482'. [ 490.376507][T11704] syzkaller1: entered promiscuous mode [ 490.453957][T11704] syzkaller1: entered allmulticast mode [ 490.533036][T11708] binder: 11707:11708 ioctl c0306201 200000000180 returned -11 [ 491.023319][ T6217] wlan1: Trigger new scan to find an IBSS to join [ 491.163833][ T10] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 491.315064][ T10] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 491.394865][ T10] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 491.444056][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 491.453627][ T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 491.489993][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.506572][ T10] usb 1-1: config 0 descriptor?? [ 491.526902][T11698] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 491.991596][ T10] hid-u2fzero 0003:10C4:8ACF.0036: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.0-1/input0 [ 492.015207][ T10] hid-u2fzero 0003:10C4:8ACF.0036: U2F Zero LED initialised [ 492.015857][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.022922][ T10] hid-u2fzero 0003:10C4:8ACF.0036: U2F Zero RNG initialised [ 492.194471][ T10] usb 1-1: USB disconnect, device number 94 [ 492.312865][ T30] audit: type=1400 audit(1758987605.706:879): avc: denied { write } for pid=92 comm="kworker/0:2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=32472 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 492.348145][T11731] CIFS mount error: No usable UNC path provided in device string! [ 492.348145][T11731] [ 492.358217][T11731] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 492.586635][T11741] 9pnet_fd: Insufficient options for proto=fd [ 492.752945][T11747] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 492.760116][T11747] overlayfs: failed to set xattr on upper [ 492.765938][T11747] overlayfs: ...falling back to redirect_dir=nofollow. [ 492.772822][T11747] overlayfs: ...falling back to index=off. [ 492.778668][T11747] overlayfs: ...falling back to uuid=null. [ 492.815817][T11748] fuse: Bad value for 'fd' [ 492.833106][T11748] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 493.763611][ T92] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 494.644357][T11769] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 494.770180][ T92] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 494.778840][ T92] usb 6-1: config 0 has no interface number 0 [ 494.796349][ T92] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 495.028547][T11770] tipc: Enabled bearer , priority 0 [ 495.232208][ T92] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.240672][ T92] usb 6-1: Product: syz [ 495.250234][ T92] usb 6-1: Manufacturer: syz [ 495.256619][ T92] usb 6-1: SerialNumber: syz [ 495.265681][ T92] usb 6-1: config 0 descriptor?? [ 495.288406][T11774] syzkaller0: entered promiscuous mode [ 495.319178][T11774] syzkaller0: entered allmulticast mode [ 495.367336][ T30] audit: type=1400 audit(1758987608.756:880): avc: denied { append } for pid=11759 comm="syz.4.1501" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 495.510993][ T92] usb 6-1: Found UVC 0.08 device syz (046d:0823) [ 495.524129][T11780] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 495.973648][ T92] usb 6-1: No valid video chain found. [ 495.981307][ T92] usb 6-1: USB disconnect, device number 56 [ 496.025340][ T1206] tipc: Node number set to 115663164 [ 496.036543][T11770] tipc: Resetting bearer [ 496.174059][T11759] tipc: Resetting bearer [ 496.226670][T11759] tipc: Disabling bearer [ 496.409059][T11795] vlan2: entered allmulticast mode [ 496.414392][T11795] bridge0: entered allmulticast mode [ 496.595731][T11792] vlan2: entered allmulticast mode [ 496.620444][T11797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.689652][T11797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.846049][T11803] FAULT_INJECTION: forcing a failure. [ 496.846049][T11803] name failslab, interval 1, probability 0, space 0, times 0 [ 496.893868][T11803] CPU: 1 UID: 0 PID: 11803 Comm: syz.6.1512 Not tainted syzkaller #0 PREEMPT(full) [ 496.893897][T11803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 496.893907][T11803] Call Trace: [ 496.893913][T11803] [ 496.893920][T11803] dump_stack_lvl+0x16c/0x1f0 [ 496.893951][T11803] should_fail_ex+0x512/0x640 [ 496.893977][T11803] should_failslab+0xc2/0x120 [ 496.893998][T11803] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 496.894019][T11803] ? skb_clone+0x190/0x3f0 [ 496.894045][T11803] skb_clone+0x190/0x3f0 [ 496.894067][T11803] netlink_deliver_tap+0xabd/0xd30 [ 496.894095][T11803] netlink_unicast+0x71f/0x870 [ 496.894122][T11803] ? __pfx_netlink_unicast+0x10/0x10 [ 496.894146][T11803] ? genl_rcv_msg+0x4bb/0x800 [ 496.894177][T11803] netlink_ack+0x696/0xb80 [ 496.894206][T11803] netlink_rcv_skb+0x332/0x420 [ 496.894227][T11803] ? __pfx_genl_rcv_msg+0x10/0x10 [ 496.894254][T11803] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 496.894284][T11803] ? netlink_deliver_tap+0x1ae/0xd30 [ 496.894309][T11803] genl_rcv+0x28/0x40 [ 496.894332][T11803] netlink_unicast+0x5aa/0x870 [ 496.894358][T11803] ? __pfx_netlink_unicast+0x10/0x10 [ 496.894381][T11803] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 496.894412][T11803] netlink_sendmsg+0x8d1/0xdd0 [ 496.894439][T11803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.894471][T11803] ____sys_sendmsg+0xa98/0xc70 [ 496.894499][T11803] ? copy_msghdr_from_user+0x10a/0x160 [ 496.894520][T11803] ? __pfx_____sys_sendmsg+0x10/0x10 [ 496.894558][T11803] ___sys_sendmsg+0x134/0x1d0 [ 496.894580][T11803] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.894626][T11803] __sys_sendmsg+0x16d/0x220 [ 496.894646][T11803] ? __pfx___sys_sendmsg+0x10/0x10 [ 496.894691][T11803] do_syscall_64+0xcd/0x4e0 [ 496.894717][T11803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.894740][T11803] RIP: 0033:0x7fe5dad8eec9 [ 496.894755][T11803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.894771][T11803] RSP: 002b:00007fe5dbbda038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.894789][T11803] RAX: ffffffffffffffda RBX: 00007fe5dafe5fa0 RCX: 00007fe5dad8eec9 [ 496.894801][T11803] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 496.894810][T11803] RBP: 00007fe5dbbda090 R08: 0000000000000000 R09: 0000000000000000 [ 496.894820][T11803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.894830][T11803] R13: 00007fe5dafe6038 R14: 00007fe5dafe5fa0 R15: 00007ffdd3cc1d38 [ 496.894856][T11803] [ 497.536843][T11810] tipc: Enabled bearer , priority 0 [ 497.544257][T11810] syzkaller0: entered promiscuous mode [ 497.549728][T11810] syzkaller0: entered allmulticast mode [ 497.689720][T11812] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1516'. [ 498.307304][T11810] tipc: Resetting bearer [ 498.327155][T11807] tipc: Resetting bearer [ 498.577773][ T5994] tipc: Node number set to 2898814762 [ 498.591525][T11807] tipc: Disabling bearer [ 499.388597][T11834] 8021q: adding VLAN 0 to HW filter on device bond2 [ 499.563776][ T5909] usb 7-1: new low-speed USB device number 40 using dummy_hcd [ 499.878709][ T5909] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 499.894111][ T5909] usb 7-1: config 179 has no interface number 0 [ 499.924826][ T5909] usb 7-1: config 179 interface 65 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 499.945353][T11842] tmpfs: Bad value for 'mpol' [ 500.035338][ T5909] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 500.054268][ T5909] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x87 has invalid maxpacket 65535, setting to 8 [ 500.073868][ T5909] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 500.086229][ T5909] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 500.110724][ T5909] usb 7-1: New USB device found, idVendor=12ab, idProduct=0000, bcdDevice=1e.eb [ 500.131318][ T5909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.321538][T11837] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 500.342035][T11849] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1525'. [ 500.450700][T11851] FAULT_INJECTION: forcing a failure. [ 500.450700][T11851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.474218][T11851] CPU: 1 UID: 0 PID: 11851 Comm: syz.4.1526 Not tainted syzkaller #0 PREEMPT(full) [ 500.474248][T11851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 500.474259][T11851] Call Trace: [ 500.474265][T11851] [ 500.474273][T11851] dump_stack_lvl+0x16c/0x1f0 [ 500.474305][T11851] should_fail_ex+0x512/0x640 [ 500.474334][T11851] _copy_from_user+0x2e/0xd0 [ 500.474360][T11851] input_event_from_user+0x133/0x3b0 [ 500.474381][T11851] ? __pfx_input_event_from_user+0x10/0x10 [ 500.474399][T11851] ? __pfx___might_resched+0x10/0x10 [ 500.474422][T11851] ? input_inject_event+0x1c0/0x3b0 [ 500.474442][T11851] evdev_write+0x37b/0x750 [ 500.474464][T11851] ? __pfx_evdev_write+0x10/0x10 [ 500.474482][T11851] ? bpf_lsm_file_permission+0x9/0x10 [ 500.474504][T11851] ? security_file_permission+0x71/0x210 [ 500.474533][T11851] ? rw_verify_area+0xcf/0x6c0 [ 500.474562][T11851] ? __pfx_evdev_write+0x10/0x10 [ 500.474577][T11851] vfs_write+0x2a0/0x11d0 [ 500.474602][T11851] ? __pfx_vfs_write+0x10/0x10 [ 500.474617][T11851] ? find_held_lock+0x2b/0x80 [ 500.474635][T11851] ? __fget_files+0x204/0x3c0 [ 500.474712][T11851] ? __fget_files+0x20e/0x3c0 [ 500.474744][T11851] ksys_write+0x1f8/0x250 [ 500.474762][T11851] ? __pfx_ksys_write+0x10/0x10 [ 500.474775][T11851] ? syscall_user_dispatch+0x78/0x140 [ 500.474806][T11851] do_syscall_64+0xcd/0x4e0 [ 500.474837][T11851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.474856][T11851] RIP: 0033:0x7f6b2098eec9 [ 500.474872][T11851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.474888][T11851] RSP: 002b:00007f6b1ebf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 500.474908][T11851] RAX: ffffffffffffffda RBX: 00007f6b20be5fa0 RCX: 00007f6b2098eec9 [ 500.474919][T11851] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000006 [ 500.474929][T11851] RBP: 00007f6b1ebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 500.474939][T11851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 500.474950][T11851] R13: 00007f6b20be6038 R14: 00007f6b20be5fa0 R15: 00007fff4da30948 [ 500.474974][T11851] [ 501.467047][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.479468][ T183] Bluetooth: (null): Invalid header checksum [ 501.547102][ T183] Bluetooth: (null): Invalid header checksum [ 501.850957][ T183] Bluetooth: (null): Invalid header checksum [ 501.885763][ T183] Bluetooth: (null): Invalid header checksum [ 501.891913][ T183] Bluetooth: (null): Invalid header checksum [ 501.923744][ T183] Bluetooth: (null): Invalid header checksum [ 502.108319][ T183] Bluetooth: (null): Invalid header checksum [ 502.118537][ T183] Bluetooth: (null): Invalid header checksum [ 502.256512][ T12] Bluetooth: (null): Invalid header checksum [ 502.398555][ T12] Bluetooth: (null): Invalid header checksum [ 502.457952][ T12] Bluetooth: (null): Invalid header checksum [ 502.592394][ T12] Bluetooth: (null): Invalid header checksum [ 502.933989][ T24] usb 7-1: USB disconnect, device number 40 [ 503.634001][T11886] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 503.884428][T11888] tmpfs: Bad value for 'mpol' [ 504.108284][ T30] audit: type=1400 audit(1758987617.506:881): avc: denied { write } for pid=11892 comm="syz.0.1538" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 504.626441][T11900] vcan0: tx drop: invalid da for name 0x000000f500000000 [ 505.021205][ T30] audit: type=1326 audit(1758987618.416:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.7.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cbd8eec9 code=0x7ffc0000 [ 505.055811][ T30] audit: type=1326 audit(1758987618.416:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.7.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f47cbd8eec9 code=0x7ffc0000 [ 505.081822][ T30] audit: type=1326 audit(1758987618.416:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.7.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cbd8eec9 code=0x7ffc0000 [ 505.110419][ T30] audit: type=1326 audit(1758987618.416:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.7.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cbd8eec9 code=0x7ffc0000 [ 505.138609][ T30] audit: type=1326 audit(1758987618.416:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.7.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f47cbd8eec9 code=0x7ffc0000 [ 505.223952][ T30] audit: type=1326 audit(1758987618.416:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.7.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cbd8eec9 code=0x7ffc0000 [ 505.488397][ T30] audit: type=1326 audit(1758987618.416:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.7.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cbd8eec9 code=0x7ffc0000 [ 505.561569][ T30] audit: type=1326 audit(1758987618.416:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.7.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f47cbd8eec9 code=0x7ffc0000 [ 505.666721][T11917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.675924][T11917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.875652][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805aae2800: rx timeout, send abort [ 505.893610][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805aae2800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 506.406681][ T30] audit: type=1326 audit(1758987618.416:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.7.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cbd8eec9 code=0x7ffc0000 [ 506.970046][T11939] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 506.977321][T11939] overlayfs: failed to set xattr on upper [ 506.983068][T11939] overlayfs: ...falling back to redirect_dir=nofollow. [ 506.989974][T11939] overlayfs: ...falling back to index=off. [ 506.995829][T11939] overlayfs: ...falling back to uuid=null. [ 507.042431][T11940] fuse: Bad value for 'fd' [ 507.065140][T11940] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 507.453646][ T5994] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 507.518552][T11941] kAFS: No cell specified [ 507.829702][ T5994] usb 1-1: Using ep0 maxpacket: 32 [ 507.845458][ T5994] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 507.860526][ T5994] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.928151][ T5994] usb 1-1: config 0 has no interface number 0 [ 508.092854][ T5994] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 508.256338][ T5994] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 508.323724][T11952] nfs: Unknown parameter 'mºœ¶bz#hÁ5[W"' [ 508.690431][ T5994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.724726][ T5994] usb 1-1: Product: syz [ 508.733886][T11934] Bluetooth: hci6: command 0x0406 tx timeout [ 508.740674][ T5994] usb 1-1: Manufacturer: syz [ 508.869269][ T5994] usb 1-1: SerialNumber: syz [ 508.901961][ T5994] usb 1-1: config 0 descriptor?? [ 508.920034][ T5994] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 508.930253][ T5994] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 509.145187][ T5994] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 509.153394][ T5994] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 509.178019][ T5994] usb 1-1: USB disconnect, device number 95 [ 509.202611][T11960] hfsplus: unable to find HFS+ superblock [ 509.293771][ T5922] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 509.338375][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 509.338395][ T30] audit: type=1400 audit(1758987622.736:899): avc: denied { write } for pid=11945 comm="syz.4.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 509.476938][ T5922] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 509.498822][ T30] audit: type=1400 audit(1758987622.896:900): avc: denied { getopt } for pid=11945 comm="syz.4.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 509.500188][ T5922] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 509.651098][ T5922] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 509.690076][ T5922] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 509.754510][ T5922] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 509.852718][T11969] syzkaller1: entered promiscuous mode [ 509.864117][ T5922] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 509.867917][T11969] syzkaller1: entered allmulticast mode [ 509.892481][ T5922] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 509.901636][T11969] FAULT_INJECTION: forcing a failure. [ 509.901636][T11969] name failslab, interval 1, probability 0, space 0, times 0 [ 509.914588][T11969] CPU: 1 UID: 0 PID: 11969 Comm: syz.0.1560 Not tainted syzkaller #0 PREEMPT(full) [ 509.914606][T11969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 509.914613][T11969] Call Trace: [ 509.914618][T11969] [ 509.914623][T11969] dump_stack_lvl+0x16c/0x1f0 [ 509.914649][T11969] should_fail_ex+0x512/0x640 [ 509.914667][T11969] should_failslab+0xc2/0x120 [ 509.914681][T11969] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 509.914695][T11969] ? rcu_is_watching+0x12/0xc0 [ 509.914710][T11969] ? nf_ct_ext_add+0x1a7/0x420 [ 509.914728][T11969] krealloc_noprof+0x1ff/0x3a0 [ 509.914741][T11969] nf_ct_ext_add+0x1a7/0x420 [ 509.914758][T11969] init_conntrack.constprop.0+0x5af/0x1080 [ 509.914776][T11969] ? __pfx_init_conntrack.constprop.0+0x10/0x10 [ 509.914793][T11969] ? __pfx_hash_conntrack_raw+0x10/0x10 [ 509.914810][T11969] ? stack_depot_save_flags+0x29/0x9c0 [ 509.914824][T11969] ? stack_trace_save+0x8e/0xc0 [ 509.914840][T11969] nf_conntrack_in+0xf29/0x1930 [ 509.914861][T11969] ? __pfx_nf_conntrack_in+0x10/0x10 [ 509.914881][T11969] ? lock_acquire+0x179/0x350 [ 509.914893][T11969] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 509.914906][T11969] nf_hook_slow+0xbb/0x200 [ 509.914920][T11969] nf_hook.constprop.0+0x422/0x750 [ 509.914933][T11969] ? __pfx_ip_rcv_finish+0x10/0x10 [ 509.914946][T11969] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 509.914959][T11969] ? __pfx_ip_rcv_finish+0x10/0x10 [ 509.914971][T11969] ? ip_rcv_core+0x934/0xe80 [ 509.914984][T11969] ? __pfx_ip_rcv+0x10/0x10 [ 509.914995][T11969] ip_rcv+0x7d/0x600 [ 509.915007][T11969] ? __pfx_ip_rcv+0x10/0x10 [ 509.915017][T11969] __netif_receive_skb_one_core+0x197/0x1e0 [ 509.915030][T11969] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 509.915043][T11969] ? lock_acquire+0x179/0x350 [ 509.915053][T11969] ? __might_fault+0xe3/0x190 [ 509.915063][T11969] ? __might_fault+0x13b/0x190 [ 509.915075][T11969] __netif_receive_skb+0x1d/0x160 [ 509.915086][T11969] netif_receive_skb+0x137/0x7b0 [ 509.915098][T11969] ? __pfx_netif_receive_skb+0x10/0x10 [ 509.915110][T11969] ? skb_partial_csum_set+0x202/0x3a0 [ 509.915129][T11969] tun_rx_batched.isra.0+0x3ee/0x740 [ 509.915148][T11969] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 509.915167][T11969] ? tun_get_user+0x1df6/0x3cd0 [ 509.915182][T11969] ? rcu_is_watching+0x12/0xc0 [ 509.915197][T11969] tun_get_user+0x28bb/0x3cd0 [ 509.915219][T11969] ? __pfx_tun_get_user+0x10/0x10 [ 509.915236][T11969] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 509.915254][T11969] ? find_held_lock+0x2b/0x80 [ 509.915269][T11969] ? tun_get+0x191/0x370 [ 509.915286][T11969] tun_chr_write_iter+0xdc/0x210 [ 509.915303][T11969] vfs_write+0x7d0/0x11d0 [ 509.915317][T11969] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 509.915334][T11969] ? __pfx_vfs_write+0x10/0x10 [ 509.915344][T11969] ? find_held_lock+0x2b/0x80 [ 509.915364][T11969] ksys_write+0x12a/0x250 [ 509.915375][T11969] ? __pfx_ksys_write+0x10/0x10 [ 509.915389][T11969] do_syscall_64+0xcd/0x4e0 [ 509.915405][T11969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.915417][T11969] RIP: 0033:0x7f859818eec9 [ 509.915427][T11969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.915438][T11969] RSP: 002b:00007f859909b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 509.915450][T11969] RAX: ffffffffffffffda RBX: 00007f85983e5fa0 RCX: 00007f859818eec9 [ 509.915457][T11969] RDX: 00000000000000c2 RSI: 0000200000000080 RDI: 0000000000000003 [ 509.915463][T11969] RBP: 00007f859909b090 R08: 0000000000000000 R09: 0000000000000000 [ 509.915469][T11969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.915475][T11969] R13: 00007f85983e6038 R14: 00007f85983e5fa0 R15: 00007ffdf1d69208 [ 509.915488][T11969] [ 510.291406][ T5922] usb 7-1: Product: syz [ 510.303548][ T5922] usb 7-1: Manufacturer: syz [ 510.464591][T11975] can0: slcan on ttyS3. [ 510.471526][T11975] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1562'. [ 510.524234][ T5922] cdc_wdm 7-1:1.0: skipping garbage [ 510.529560][ T5922] cdc_wdm 7-1:1.0: skipping garbage [ 510.560698][ T5922] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 510.567366][ T5922] cdc_wdm 7-1:1.0: Unknown control protocol [ 510.574351][T11972] can0 (unregistered): slcan off ttyS3. [ 510.936222][T11980] vlan2: entered allmulticast mode [ 511.596430][T11982] vlan2: entered allmulticast mode [ 511.983780][T11999] tipc: Enabled bearer , priority 0 [ 511.991096][T11999] syzkaller0: entered promiscuous mode [ 511.996848][T11999] syzkaller0: entered allmulticast mode [ 512.007266][ T30] audit: type=1400 audit(1758987625.376:901): avc: denied { nlmsg_write } for pid=11995 comm="syz.4.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 512.045008][T11999] tipc: Resetting bearer [ 512.056604][T11995] tipc: Resetting bearer [ 512.122341][T11995] tipc: Disabling bearer [ 513.033854][ T5922] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 513.913965][T12018] misc userio: Invalid payload size [ 513.979642][T12005] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1573'. [ 514.269495][ T5994] usb 7-1: USB disconnect, device number 41 [ 514.333107][T12020] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1574'. [ 514.548622][ T30] audit: type=1326 audit(1758987627.946:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12021 comm="syz.6.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5dad8eec9 code=0x7ffc0000 [ 514.582737][ T30] audit: type=1326 audit(1758987627.976:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12021 comm="syz.6.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5dad8eec9 code=0x7ffc0000 [ 514.612618][ T30] audit: type=1326 audit(1758987627.976:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12021 comm="syz.6.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fe5dad8eec9 code=0x7ffc0000 [ 514.692498][ T30] audit: type=1326 audit(1758987628.056:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12021 comm="syz.6.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5dad8eec9 code=0x7ffc0000 [ 514.868080][ T30] audit: type=1326 audit(1758987628.056:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12021 comm="syz.6.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5dad8eec9 code=0x7ffc0000 [ 514.892239][ T30] audit: type=1326 audit(1758987628.256:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12021 comm="syz.6.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe5dad8eec9 code=0x7ffc0000 [ 514.994829][T12036] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 515.002019][T12036] overlayfs: failed to set xattr on upper [ 515.007870][T12036] overlayfs: ...falling back to redirect_dir=nofollow. [ 515.014887][T12036] overlayfs: ...falling back to index=off. [ 515.020767][T12036] overlayfs: ...falling back to uuid=null. [ 515.063524][T12037] fuse: Bad value for 'fd' [ 515.095061][T12037] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 515.112236][ T1206] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 515.459085][ T30] audit: type=1326 audit(1758987628.256:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12021 comm="syz.6.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5dad8eec9 code=0x7ffc0000 [ 515.489207][ T1206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 515.503013][ T30] audit: type=1326 audit(1758987628.256:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12021 comm="syz.6.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe5dad8eec9 code=0x7ffc0000 [ 515.508744][ T1206] usb 6-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 515.545078][ T1206] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.569782][ T30] audit: type=1326 audit(1758987628.256:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12021 comm="syz.6.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5dad8eec9 code=0x7ffc0000 [ 515.586239][ T1206] usb 6-1: config 0 descriptor?? [ 515.606745][T12031] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 515.686642][ T30] audit: type=1326 audit(1758987628.256:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12021 comm="syz.6.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5dad8eec9 code=0x7ffc0000 [ 515.782810][T12047] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1586'. [ 515.896704][T12056] syzkaller1: entered promiscuous mode [ 515.902334][T12056] syzkaller1: entered allmulticast mode [ 515.912838][T12052] ptrace attach of "./syz-executor exec"[8396] was attempted by "./syz-executor exec"[12052] [ 516.021969][ T1206] hid_parser_main: 73 callbacks suppressed [ 516.021992][ T1206] hid-udraw 0003:20D6:CB17.0037: unknown main item tag 0x0 [ 516.053945][ T1206] hid-udraw 0003:20D6:CB17.0037: unknown main item tag 0x0 [ 516.068822][ T1206] hid-udraw 0003:20D6:CB17.0037: item fetching failed at offset 3/5 [ 516.095963][ T1206] hid-udraw 0003:20D6:CB17.0037: parse failed [ 516.102167][ T1206] hid-udraw 0003:20D6:CB17.0037: probe with driver hid-udraw failed with error -22 [ 516.125151][T12063] netlink: 'syz.0.1590': attribute type 10 has an invalid length. [ 516.148979][T12063] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 516.175740][T12063] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 516.234258][ T92] usb 6-1: USB disconnect, device number 57 [ 516.815859][ T31] INFO: task syz.2.1016:10030 blocked for more than 143 seconds. [ 516.833608][ T5922] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 516.851990][ T31] Not tainted syzkaller #0 [ 516.879183][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 516.890681][ T31] task:syz.2.1016 state:D stack:26856 pid:10030 tgid:10029 ppid:5848 task_flags:0x400140 flags:0x00004004 [ 516.903700][ T31] Call Trace: [ 516.907900][ T31] [ 516.910999][ T31] __schedule+0x1190/0x5de0 [ 516.919755][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 516.925114][ T31] ? __pfx___schedule+0x10/0x10 [ 516.930226][ T31] ? find_held_lock+0x2b/0x80 [ 516.937422][ T31] ? schedule+0x2d7/0x3a0 [ 516.978636][ T31] ? usbdev_open+0x1b6/0x8b0 [ 516.989588][ T31] schedule+0xe7/0x3a0 [ 516.999199][ T31] schedule_preempt_disabled+0x13/0x30 [ 517.010332][ T31] __mutex_lock+0x81b/0x1060 [ 517.019810][ T31] ? klist_put+0xc7/0x1b0 [ 517.027673][ T31] ? usbdev_open+0x1b6/0x8b0 [ 517.032629][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 517.062927][ T31] ? kobject_put+0xab/0x5a0 [ 517.066258][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 517.085006][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 517.085094][ T31] ? __pfx_device_match_devt+0x10/0x10 [ 517.155682][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 517.172828][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 517.176021][ T5922] usb 1-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 517.187555][ T31] ? usbdev_open+0x1b6/0x8b0 [ 517.193180][ T31] usbdev_open+0x1b6/0x8b0 [ 517.197796][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.198517][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 517.207927][ T5922] usb 1-1: config 0 descriptor?? [ 517.214524][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 517.221203][T12063] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 517.230828][ T31] ? chrdev_open+0x58c/0x6a0 [ 517.239528][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 517.248225][ T31] chrdev_open+0x234/0x6a0 [ 517.252753][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 517.259477][ T31] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 517.268175][ T31] do_dentry_open+0x97f/0x1530 [ 517.273200][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 517.279522][ T31] vfs_open+0x82/0x3f0 [ 517.285956][ T31] path_openat+0x1de4/0x2cb0 [ 517.308356][ T31] ? __pfx_path_openat+0x10/0x10 [ 517.317093][ T31] do_filp_open+0x20b/0x470 [ 517.324395][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 517.332356][ T31] ? alloc_fd+0x471/0x7d0 [ 517.339589][ T31] do_sys_openat2+0x11b/0x1d0 [ 517.347008][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 517.361591][ T31] ? __pfx___schedule+0x10/0x10 [ 517.366608][ T31] __x64_sys_openat+0x174/0x210 [ 517.371633][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 517.377276][ T31] do_syscall_64+0xcd/0x4e0 [ 517.381851][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.388069][ T31] RIP: 0033:0x7fceaeb8d710 [ 517.409357][ T31] RSP: 002b:00007fceacdf5b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 517.423436][ T31] RAX: ffffffffffffffda RBX: 0000000000002002 RCX: 00007fceaeb8d710 [ 517.449006][ T31] RDX: 0000000000002002 RSI: 00007fceacdf5c10 RDI: 00000000ffffff9c [ 517.485849][ T31] RBP: 00007fceacdf5c10 R08: 0000000000000000 R09: 0000000000000000 [ 517.515127][ T5922] usbhid 1-1:0.0: can't add hid device: -71 [ 517.521119][ T5922] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 517.570773][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 517.571912][ T5922] usb 1-1: USB disconnect, device number 97 [ 517.593255][ T31] R13: 00007fceaede6038 R14: 00007fceaede5fa0 R15: 00007ffcca4bdd08 [ 517.602518][ T31] [ 517.609143][ T31] [ 517.609143][ T31] Showing all locks held in the system: [ 517.620367][ T31] 1 lock held by khungtaskd/31: [ 517.630757][ T31] #0: ffffffff8e5c16a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 517.645493][ T31] 2 locks held by getty/5612: [ 517.650419][ T31] #0: ffff88814d9a20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 517.661863][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 517.676520][ T31] 1 lock held by syz-executor/5833: [ 517.683018][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 517.700280][ T31] 4 locks held by udevd/5853: [ 517.707900][ T31] #0: ffff88807a616e80 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 517.717129][ T31] #1: ffff88807b86c488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 517.726910][ T31] #2: ffff888054ff5788 (kn->active#19){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 517.736509][ T31] #3: ffff88807b5e0198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 517.745878][ T31] 5 locks held by kworker/0:3/5856: [ 517.751064][ T31] #0: ffff8881442ad948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 517.762119][ T31] #1: ffffc9000415fd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 517.773790][ T31] #2: ffff888029781198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 517.782724][ T31] #3: ffff88807b5e0198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 517.792015][ T31] #4: ffff88807b5f5160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 517.801280][ T31] 1 lock held by syz.2.1016/10030: [ 517.807459][ T31] #0: ffff888029781198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x8b0 [ 517.816549][ T31] [ 517.818875][ T31] ============================================= [ 517.818875][ T31] [ 517.829244][ T31] NMI backtrace for cpu 1 [ 517.829264][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 517.829284][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 517.829294][ T31] Call Trace: [ 517.829300][ T31] [ 517.829308][ T31] dump_stack_lvl+0x116/0x1f0 [ 517.829338][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 517.829357][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 517.829385][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 517.829405][ T31] watchdog+0xf0e/0x1260 [ 517.829429][ T31] ? __pfx_watchdog+0x10/0x10 [ 517.829447][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 517.829470][ T31] ? __kthread_parkme+0x19e/0x250 [ 517.829497][ T31] ? __pfx_watchdog+0x10/0x10 [ 517.829515][ T31] kthread+0x3c2/0x780 [ 517.829532][ T31] ? __pfx_kthread+0x10/0x10 [ 517.829551][ T31] ? rcu_is_watching+0x12/0xc0 [ 517.829574][ T31] ? __pfx_kthread+0x10/0x10 [ 517.829591][ T31] ret_from_fork+0x56a/0x730 [ 517.829607][ T31] ? __pfx_kthread+0x10/0x10 [ 517.829624][ T31] ret_from_fork_asm+0x1a/0x30 [ 517.829656][ T31] [ 517.829662][ T31] Sending NMI from CPU 1 to CPUs 0: [ 517.947819][ C0] NMI backtrace for cpu 0 [ 517.947834][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 517.947851][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 517.947861][ C0] Workqueue: events_unbound toggle_allocation_gate [ 517.947880][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x66/0x70 [ 517.947898][ C0] Code: 82 18 16 00 00 83 f8 02 75 20 48 8b 8a 20 16 00 00 8b 92 1c 16 00 00 48 8b 01 48 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 [ 517.947911][ C0] RSP: 0018:ffffc90000117928 EFLAGS: 00000093 [ 517.947921][ C0] RAX: 0000000000000000 RBX: ffff88801b86e558 RCX: 1ffff92000022f13 [ 517.947930][ C0] RDX: ffff88801e2cc880 RSI: ffffffff815f7f0b RDI: 0000000000000007 [ 517.947938][ C0] RBP: ffffffff82176c9b R08: 0000000000000007 R09: 0000000000000005 [ 517.947946][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000c9c [ 517.947954][ C0] R13: 8000000002176063 R14: 0000000000000001 R15: 8000000000000063 [ 517.947963][ C0] FS: 0000000000000000(0000) GS:ffff8881246b1000(0000) knlGS:0000000000000000 [ 517.947978][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 517.947987][ C0] CR2: 0000555566f4f5c8 CR3: 000000000e380000 CR4: 00000000003526f0 [ 517.947995][ C0] Call Trace: [ 517.948000][ C0] [ 517.948005][ C0] __text_poke+0x35b/0xb70 [ 517.948021][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 517.948039][ C0] ? __pfx___text_poke+0x10/0x10 [ 517.948053][ C0] ? __kmalloc_node_track_caller_noprof+0xeb/0x510 [ 517.948070][ C0] ? __kmalloc_node_track_caller_noprof+0xeb/0x510 [ 517.948084][ C0] smp_text_poke_batch_finish+0x237/0xdb0 [ 517.948102][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 517.948120][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 517.948139][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 517.948156][ C0] ? find_held_lock+0x2b/0x80 [ 517.948174][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 517.948191][ C0] jump_label_update+0x376/0x550 [ 517.948213][ C0] static_key_disable_cpuslocked+0x158/0x1c0 [ 517.948232][ C0] static_key_disable+0x1a/0x20 [ 517.948250][ C0] toggle_allocation_gate+0x145/0x280 [ 517.948264][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 517.948280][ C0] ? rcu_is_watching+0x12/0xc0 [ 517.948298][ C0] process_one_work+0x9cc/0x1b70 [ 517.948316][ C0] ? __pfx_process_one_work+0x10/0x10 [ 517.948333][ C0] ? assign_work+0x1a0/0x250 [ 517.948347][ C0] worker_thread+0x6c8/0xf10 [ 517.948365][ C0] ? __pfx_worker_thread+0x10/0x10 [ 517.948378][ C0] kthread+0x3c2/0x780 [ 517.948392][ C0] ? __pfx_kthread+0x10/0x10 [ 517.948405][ C0] ? rcu_is_watching+0x12/0xc0 [ 517.948420][ C0] ? __pfx_kthread+0x10/0x10 [ 517.948433][ C0] ret_from_fork+0x56a/0x730 [ 517.948445][ C0] ? __pfx_kthread+0x10/0x10 [ 517.948458][ C0] ret_from_fork_asm+0x1a/0x30 [ 517.948479][ C0] [ 517.948885][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 518.238684][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 518.247780][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 518.257812][ T31] Call Trace: [ 518.261067][ T31] [ 518.263974][ T31] dump_stack_lvl+0x3d/0x1f0 [ 518.268548][ T31] vpanic+0x6e8/0x7a0 [ 518.272522][ T31] ? __pfx_vpanic+0x10/0x10 [ 518.276997][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 518.282177][ T31] panic+0xca/0xd0 [ 518.285868][ T31] ? __pfx_panic+0x10/0x10 [ 518.290256][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 518.295619][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 518.301851][ T31] ? watchdog+0xd78/0x1260 [ 518.306241][ T31] ? watchdog+0xd6b/0x1260 [ 518.310630][ T31] watchdog+0xd89/0x1260 [ 518.314858][ T31] ? __pfx_watchdog+0x10/0x10 [ 518.319530][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 518.324714][ T31] ? __kthread_parkme+0x19e/0x250 [ 518.329734][ T31] ? __pfx_watchdog+0x10/0x10 [ 518.334404][ T31] kthread+0x3c2/0x780 [ 518.338449][ T31] ? __pfx_kthread+0x10/0x10 [ 518.343015][ T31] ? rcu_is_watching+0x12/0xc0 [ 518.347764][ T31] ? __pfx_kthread+0x10/0x10 [ 518.352342][ T31] ret_from_fork+0x56a/0x730 [ 518.356908][ T31] ? __pfx_kthread+0x10/0x10 [ 518.361472][ T31] ret_from_fork_asm+0x1a/0x30 [ 518.366220][ T31] [ 518.369449][ T31] Kernel Offset: disabled [ 518.373749][ T31] Rebooting in 86400 seconds..